Non notée
CVE-2025-38105 ALSA: usb-audio: Kill timer properly at removal
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill timer properly at removal The USB-audio MIDI code initializes the timer, but in a rare case, the driver might be freed without the disconnect call. This leaves the timer in an active state while the assigned object is released via snd_usbmidi_free(), which ends up with a kernel warning when the debug configuration is enabled, as spotted by fuzzer. For avoiding the problem, put timer_shutdown_sync() at snd_usbmidi_free(), so that the timer can be killed properly. While we're at it, replace the existing timer_delete_sync() at the disconnect callback with timer_shutdown_sync(), too.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 6.16 | premières → < 6.16 | 6.16 |
| Linux 6.15 | premières → < 6.15.3 | 6.15.3 |
| Linux 6.12 | premières → < 6.12.52 | 6.12.52 |
| Linux 6.6 | premières → < 6.6.111 | 6.6.111 |
| Linux 6.1 | premières → < 6.1.167 | 6.1.167 |
| Linux 5.15 | premières → < 5.15.209 | 5.15.209 |
| Linux | 2.6.14 | Pas de correctif indiqué |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | Versions non publiées |
Autres CVE de Linux
Les 18286 CVE de Linux →
CVE-2026-100082
xen-blkback: Avoid UAF when reading I/O statistics
Non notée
CVE-2026-100081
xen-netback: defer xenvif_mcast_addr_list_free()
Non notée
CVE-2026-100080
xen-netback: Fix UAF when reading statistics data
Non notée
CVE-2026-99270
tcp: Fix potential UAF in reqsk_timer_handler().
8.1
Élevée