CVE-2026-53291

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
26/06/2026
Last modified:
08/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ALSA: hda/conexant: Fix missing error check for jack detection<br /> <br /> In cx_probe(), the return value of snd_hda_jack_detect_enable_callback()<br /> is ignored. This function returns a pointer, and if it fails (e.g., due<br /> to memory allocation failure), it returns an error pointer which must<br /> be checked using IS_ERR().<br /> <br /> If the registration fails, the driver continues to probe, but the jack<br /> detection callback will not be registered. This can lead to a kernel<br /> crash later when the driver attempts to handle jack events or accesses<br /> the uninitialized structure.<br /> <br /> Check the return value using IS_ERR() and propagate the error via<br /> PTR_ERR() to the probe caller.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.15.149 (including) 5.15.209 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.1.77 (including) 6.1.175 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.6.16 (including) 6.6.141 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7.4 (including) 6.12.91 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.18.33 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19 (including) 7.0.10 (excluding)
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*