CVE-2025-71192

Linux Kernel Use-After-Free in ALSA AC97 Controller Registration

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in snd_ac97_controller_register() If ac97_add_adapter() fails, put_device() is the correct way to drop the device reference. kfree() is not required. Add kfree() if idr_alloc() fails and in ac97_adapter_release() to do the cleanup. Found by code review.

References (5)

Core 5

Scores

EPSS 0.0003
EPSS Percentile 8.0%

Details

Status published
Products (16)
linux/Kernel 4.15.0 - 6.1.161linux
linux/Kernel 6.13.0 - 6.18.6linux
linux/Kernel 6.2.0 - 6.6.121linux
linux/Kernel 6.7.0 - 6.12.66linux
Linux/Linux < 4.15
Linux/Linux 4.15
Linux/Linux 6.1.161 - 6.1.*
Linux/Linux 6.12.66 - 6.12.*
Linux/Linux 6.18.6 - 6.18.*
Linux/Linux 6.19
... and 6 more
Published Feb 04, 2026
Tracked Since Feb 18, 2026