CVE-2026-90119

ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup

snd_ice1712_probe() performs multiple initialization steps after snd_card_new(), but directly returns on failures from later steps without releasing the ALSA card, causing resource leaks when probing fails.

Use snd_devm_card_new() together with scope-based cleanup via __free(snd_card_unref), and clear the card pointer after successful registration to keep it alive.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ca642da4b33d385c5a633287e1c4155f1ea09638 to before c5c7c7b6cfae73c46e4544a9ef08ff89231a670dAffected ca642da4b33d385c5a633287e1c4155f1ea09638 to before d8ac49391a1562dc784fc91e810e696284cb647eAffected ca642da4b33d385c5a633287e1c4155f1ea09638 to before b15782627b6562f7b6d628f4699316f26340f835Affected ca642da4b33d385c5a633287e1c4155f1ea09638 to before 24b399f51812d727dc25d7814c4d7e0cca38201eAffected ca642da4b33d385c5a633287e1c4155f1ea09638 to before d736eba9c453fedce664fdf592c8b71ecff1932bAffected
LinuxLinux	5.15Affected before 5.15Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

ca642da4b33d385c5a633287e1c4155f1ea09638 to before c5c7c7b6cfae73c46e4544a9ef08ff89231a670dAffected
ca642da4b33d385c5a633287e1c4155f1ea09638 to before d8ac49391a1562dc784fc91e810e696284cb647eAffected
ca642da4b33d385c5a633287e1c4155f1ea09638 to before b15782627b6562f7b6d628f4699316f26340f835Affected
ca642da4b33d385c5a633287e1c4155f1ea09638 to before 24b399f51812d727dc25d7814c4d7e0cca38201eAffected
ca642da4b33d385c5a633287e1c4155f1ea09638 to before d736eba9c453fedce664fdf592c8b71ecff1932bAffected

LinuxLinux

5.15Affected
before 5.15Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.