CVE-2026-53291
MEDIUMALSA: hda/conexant: Fix missing error check for jack detection
Title source: cnaDescription
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/conexant: Fix missing error check for jack detection In cx_probe(), the return value of snd_hda_jack_detect_enable_callback() is ignored. This function returns a pointer, and if it fails (e.g., due to memory allocation failure), it returns an error pointer which must be checked using IS_ERR(). If the registration fails, the driver continues to probe, but the jack detection callback will not be registered. This can lead to a kernel crash later when the driver attempts to handle jack events or accesses the uninitialized structure. Check the return value using IS_ERR() and propagate the error via PTR_ERR() to the probe caller.
References (7)
Core 7
Core References
Scores
CVSS v3
5.5
EPSS
0.0012
EPSS Percentile
2.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (29)
linux/Kernel
< 5.15.209linux
linux/Kernel
5.16.0 - 6.1.175linux
linux/Kernel
6.13.0 - 7.0.10linux
linux/Kernel
6.2.0 - 6.6.141linux
linux/Kernel
6.7.0 - 6.12.91linux
linux/Kernel
6.8.0 - 6.18.33linux
Linux/Linux
< 6.8
Linux/Linux
24d748413cc4e1d97074bae1f335d32d30912f10 - d68f753d89f4ef6e410d7e8b7e8ab2fdde921b80
Linux/Linux
2cb659ef0ac744545499e7c37665b276d9e405da - a2a33e87a2ffce3046c574d24eec4390c27c9365
Linux/Linux
4a28302b2c681e3cf85e3b41231fff363c4c6a0e
... and 19 more
Published
Jun 26, 2026
Tracked Since
Jun 27, 2026