CVE-2026-90119

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-90119", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.787Z", "datePublished": "2026-09-17T16:06:23.962Z", "dateUpdated": "2026-10-19T08:58:17.720Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T08:58:17.720Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ice1712: Fix the card leak at probe error with the auto-cleanup\n\nsnd_ice1712_probe() performs multiple initialization steps after\nsnd_card_new(), but directly returns on failures from later steps\nwithout releasing the ALSA card, causing resource leaks when\nprobing fails.\n\nUse snd_devm_card_new() together with scope-based cleanup\nvia __free(snd_card_unref), and clear the card pointer after\nsuccessful registration to keep it alive."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/pci/ice1712/ice1712.c"], "versions": [{"version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "lessThan": "c5c7c7b6cfae73c46e4544a9ef08ff89231a670d", "status": "affected", "versionType": "git"}, {"version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "lessThan": "d8ac49391a1562dc784fc91e810e696284cb647e", "status": "affected", "versionType": "git"}, {"version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "lessThan": "b15782627b6562f7b6d628f4699316f26340f835", "status": "affected", "versionType": "git"}, {"version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "lessThan": "24b399f51812d727dc25d7814c4d7e0cca38201e", "status": "affected", "versionType": "git"}, {"version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "lessThan": "d736eba9c453fedce664fdf592c8b71ecff1932b", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/pci/ice1712/ice1712.c"], "versions": [{"version": "5.15", "status": "affected"}, {"version": "0", "lessThan": "5.15", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.157", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.110", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.52", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.6", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "6.6.157"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "6.12.110"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "6.18.52"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "7.2.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/c5c7c7b6cfae73c46e4544a9ef08ff89231a670d"}, {"url": "https://git.kernel.org/stable/c/d8ac49391a1562dc784fc91e810e696284cb647e"}, {"url": "https://git.kernel.org/stable/c/b15782627b6562f7b6d628f4699316f26340f835"}, {"url": "https://git.kernel.org/stable/c/24b399f51812d727dc25d7814c4d7e0cca38201e"}, {"url": "https://git.kernel.org/stable/c/d736eba9c453fedce664fdf592c8b71ecff1932b"}], "title": "ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["sound/pci/ice1712/ice1712.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "c5c7c7b6cfae73c46e4544a9ef08ff89231a670d", "status": "affected", "version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "versionType": "git"}, {"lessThan": "d8ac49391a1562dc784fc91e810e696284cb647e", "status": "affected", "version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "versionType": "git"}, {"lessThan": "b15782627b6562f7b6d628f4699316f26340f835", "status": "affected", "version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "versionType": "git"}, {"lessThan": "24b399f51812d727dc25d7814c4d7e0cca38201e", "status": "affected", "version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "versionType": "git"}, {"lessThan": "d736eba9c453fedce664fdf592c8b71ecff1932b", "status": "affected", "version": "ca642da4b33d385c5a633287e1c4155f1ea09638", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["sound/pci/ice1712/ice1712.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.15"}, {"lessThan": "5.15", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.157", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.110", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.52", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ice1712: Fix the card leak at probe error with the auto-cleanup\n\nsnd_ice1712_probe() performs multiple initialization steps after\nsnd_card_new(), but directly returns on failures from later steps\nwithout releasing the ALSA card, causing resource leaks when\nprobing fails.\n\nUse snd_devm_card_new() together with scope-based cleanup\nvia __free(snd_card_unref), and clear the card pointer after\nsuccessful registration to keep it alive."}], "id": "CVE-2026-90119", "lastModified": "2026-10-19T09:19:01.417", "metrics": {}, "published": "2026-09-17T17:17:04.080", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/24b399f51812d727dc25d7814c4d7e0cca38201e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b15782627b6562f7b6d628f4699316f26340f835"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c5c7c7b6cfae73c46e4544a9ef08ff89231a670d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d736eba9c453fedce664fdf592c8b71ecff1932b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d8ac49391a1562dc784fc91e810e696284cb647e"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup", "id": "2536480", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536480"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nALSA: ice1712: Fix the card leak at probe error with the auto-cleanup\nsnd_ice1712_probe() performs multiple initialization steps after\nsnd_card_new(), but directly returns on failures from later steps\nwithout releasing the ALSA card, causing resource leaks when\nprobing fails.\nUse snd_devm_card_new() together with scope-based cleanup\nvia __free(snd_card_unref), and clear the card pointer after\nsuccessful registration to keep it alive.", "A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) ice1712 component. This vulnerability occurs when the `snd_ice1712_probe()` function, responsible for initializing the sound card, encounters an error. During such failures, the system does not properly release allocated ALSA card resources, leading to resource leaks. A local attacker could potentially exploit this issue to exhaust system resources, resulting in a denial of service (DoS)."], "name": "CVE-2026-90119", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-17T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-90119\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-90119\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-90119.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ca642da4b33d385c5a633287e1c4155f1ea09638,c5c7c7b6cfae73c46e4544a9ef08ff89231a670d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ca642da4b33d385c5a633287e1c4155f1ea09638,d8ac49391a1562dc784fc91e810e696284cb647e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ca642da4b33d385c5a633287e1c4155f1ea09638,b15782627b6562f7b6d628f4699316f26340f835)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ca642da4b33d385c5a633287e1c4155f1ea09638,24b399f51812d727dc25d7814c4d7e0cca38201e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ca642da4b33d385c5a633287e1c4155f1ea09638,d736eba9c453fedce664fdf592c8b71ecff1932b)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.15"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.15)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.157,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.110,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.52,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.6,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-18T17:00:12.831577+00:00", "updated": "2026-09-24T03:30:08.055103+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}