SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-74505

UNKNOWN · CVSS N/A EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The ALSA 6fire driver in the Linux kernel is vulnerable to a use-after-free (UAF) condition due to improper error handling during the probe phase, which can lead to potential exploitation. This vulnerability primarily affects systems utilizing the 6fire driver, and it is crucial for developers and system administrators managing Linux environments to prioritize applying the patch to mitigate risks associated with this flaw.

CVE
CVE-2026-74505
Severity
UNKNOWN
CVSS
N/A
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a UAF. This patch addresses it by doing the almost same cleanup procedure like the normal disconnect phase at the error path.