CVE-2026-74505
Detail
Received This CVE record has recently been published to the CVE List and has been included within the NVD dataset.
Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: 6fire: Fix UAF at error handling during probe
Although 6fire driver had a few fixes for dealing with the early error
handling during the probe phase, it forgot a pending URB before
freeing the resources, which may lead to a UAF.
This patch addresses it by doing the almost same cleanup procedure
like the normal disconnect phase at the error path.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 2.0 Severity and Vector Strings:
NVD assessment
not yet provided.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected]
Change History
4 change records found show changes
CVE Modified by kernel.org
8/19/2026 1:21:07 PM
Action
Type
Old Value
New Value
Added
Reference
https://git.kernel.org/stable/c/8b7ecb2446845fa8d1f1ce9aac6307caac50cfd5
Added
Reference
https://git.kernel.org/stable/c/a0bb5b9d39e54888385dc399c899223299201fe6
Added
Reference
https://git.kernel.org/stable/c/d41bfea14ee6e063a953f6e72046088737c4e66c
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"49bc7741cd2761c703a292dc69245041ae8a67bd","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"2de734dcbb210bd59983e13d36988acbcc122194","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"11e2953d9f4c7c3d2af94a889c2d805c537d633f","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"a54bf16965f896415c3337bc4fbb40fb11941d99","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.39","status":"affected"},{"version":"0","lessThan":"2.6.39","versionType":"semver","status":"unaffected"},{"version":"6.6.151","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.103","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.44","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.8","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Record truncated, showing 2048 of 2461 characters.
View Entire Change Record [{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"d41bfea14ee6e063a953f6e72046088737c4e66c","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"8b7ecb2446845fa8d1f1ce9aac6307caac50cfd5","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"a0bb5b9d39e54888385dc399c899223299201fe6","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"49bc7741cd2761c703a292dc69245041ae8a67bd","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"2de734dcbb210bd59983e13d36988acbcc122194","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"11e2953d9f4c7c3d2af94a889c2d805c537d633f","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"a54bf16965f896415c3337bc4fbb40fb11941d99","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.39","status":"affected"},{"version":"0","lessThan":"2.6.39","versionType":"semver","status":"unaffected"},{"version":"5.10.265","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.216","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.183","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.151","lessThanOrEqual":"6.6.*","versionType":"se
CVE Modified by kernel.org
8/18/2026 3:16:54 AM
Action
Type
Old Value
New Value
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"49bc7741cd2761c703a292dc69245041ae8a67bd","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"2de734dcbb210bd59983e13d36988acbcc122194","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"11e2953d9f4c7c3d2af94a889c2d805c537d633f","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"a54bf16965f896415c3337bc4fbb40fb11941d99","versionType":"git","status":"affected"},{"version":"0","lessThan":"6.6.151","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.12.103","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.18.44","versionType":"semver","status":"affected"},{"version":"0","lessThan":"7.1.8","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.6.151","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.103","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.44","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.8","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"49bc7741cd2761c703a292dc69245041ae8a67bd","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"2de734dcbb210bd59983e13d36988acbcc122194","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"11e2953d9f4c7c3d2af94a889c2d805c537d633f","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c","versionType":"git","status":"affected"},{"version":"c6d43ba816d1cf1d125bfbfc938f2a28a87facf9","lessThan":"a54bf16965f896415c3337bc4fbb40fb11941d99","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.39","status":"affected"},{"version":"0","lessThan":"2.6.39","versionType":"semver","status":"unaffected"},{"version":"6.6.151","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.103","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.44","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.8","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
CVE Modified by kernel.org
8/17/2026 2:19:47 AM
Action
Type
Old Value
New Value
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"49bc7741cd2761c703a292dc69245041ae8a67bd","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"2de734dcbb210bd59983e13d36988acbcc122194","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"11e2953d9f4c7c3d2af94a889c2d805c537d633f","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"a54bf16965f896415c3337bc4fbb40fb11941d99","versionType":"git","status":"affected"},{"version":"0","lessThan":"6.6.151","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.12.103","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.18.44","versionType":"semver","status":"affected"},{"version":"0","lessThan":"7.1.8","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.6.151","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.103","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.44","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.8","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc6","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"49bc7741cd2761c703a292dc69245041ae8a67bd","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"2de734dcbb210bd59983e13d36988acbcc122194","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"11e2953d9f4c7c3d2af94a889c2d805c537d633f","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"a54bf16965f896415c3337bc4fbb40fb11941d99","versionType":"git","status":"affected"},{"version":"0","lessThan":"6.6.151","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.12.103","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.18.44","versionType":"semver","status":"affected"},{"version":"0","lessThan":"7.1.8","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.6.151","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.103","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.44","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.8","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
New CVE Received from kernel.org
8/15/2026 9:17:55 AM
Action
Type
Old Value
New Value
Added
Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: 6fire: Fix UAF at error handling during probe
Although 6fire driver had a few fixes for dealing with the early error
handling during the probe phase, it forgot a pending URB before
freeing the resources, which may lead to a UAF.
This patch addresses it by doing the almost same cleanup procedure
like the normal disconnect phase at the error path.
Added
Reference
https://git.kernel.org/stable/c/11e2953d9f4c7c3d2af94a889c2d805c537d633f
Added
Reference
https://git.kernel.org/stable/c/2de734dcbb210bd59983e13d36988acbcc122194
Added
Reference
https://git.kernel.org/stable/c/49bc7741cd2761c703a292dc69245041ae8a67bd
Added
Reference
https://git.kernel.org/stable/c/630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c
Added
Reference
https://git.kernel.org/stable/c/a54bf16965f896415c3337bc4fbb40fb11941d99
Added
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"49bc7741cd2761c703a292dc69245041ae8a67bd","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"2de734dcbb210bd59983e13d36988acbcc122194","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"11e2953d9f4c7c3d2af94a889c2d805c537d633f","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"a54bf16965f896415c3337bc4fbb40fb11941d99","versionType":"git","status":"affected"},{"version":"0","lessThan":"6.6.151","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.12.103","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.18.44","versionType":"semver","status":"affected"},{"version":"0","lessThan":"7.1.8","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["sound/usb/6fire/chip.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.6.151","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.103","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.44","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.8","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc6","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Quick Info
CVE Dictionary Entry: CVE-2026-74505 NVD
Published Date: 08/15/2026 NVD
Last Modified: 08/19/2026
Source: kernel.org
) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
