CVE-2026-90214

ASoC: xilinx: formatter_pcm: fix stream_data leak on open error

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: xilinx: formatter_pcm: fix stream_data leak on open error

In xlnx_formatter_pcm_open(), stream_data is allocated and adata->play_stream or adata->capture_stream is assigned early. If a later step, such as snd_pcm_hw_constraint_step() or snd_pcm_hw_constraint_integer(), fails, the function returns the error immediately. ALSA does not call the close callback when open fails, so stream_data is leaked and the stream pointer is left dangling, pointing to a substream that ALSA frees. A later interrupt would then call snd_pcm_period_elapsed() on the freed substream.

Free stream_data and clear the stream pointer on the error paths.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before 5e1a2d9fff57f3a2b1a0f54d128d64245a253004Affected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before edf81b293cba1b00a5e71becf184414f6991a6caAffected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before 3fd89a51b8cfe788df67f54b716b305dd45b8468Affected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before 8c38ae4a465691947977c25d10394da22a64a19fAffected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before 9030aa4e14b704dc39ee208207cb65064020d857Affected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before 8b30628dfc2b2fad3b55a9441776a226035045faAffected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before 4e0ce77df7d9808926719d7950a07fbad14ea9efAffected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before b992511180e126150c6ad3580a6fd568c385f4c6Affected
LinuxLinux	5.1Affected before 5.1Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before 5e1a2d9fff57f3a2b1a0f54d128d64245a253004Affected
6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before edf81b293cba1b00a5e71becf184414f6991a6caAffected
6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before 3fd89a51b8cfe788df67f54b716b305dd45b8468Affected
6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before 8c38ae4a465691947977c25d10394da22a64a19fAffected
6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before 9030aa4e14b704dc39ee208207cb65064020d857Affected
6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before 8b30628dfc2b2fad3b55a9441776a226035045faAffected
6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before 4e0ce77df7d9808926719d7950a07fbad14ea9efAffected
6f6c3c36f0917be24587eeba818ab4fdfcb5465a to before b992511180e126150c6ad3580a6fd568c385f4c6Affected

LinuxLinux

5.1Affected
before 5.1Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.