In the Linux kernel, the following vulnerability has been resolved:

ALSA: ac97: fix a double free in snd_ac97_controller_register()

If ac97_add_adapter() fails, put_device() is the correct way to drop
the device reference. kfree() is not required.
Add kfree() if idr_alloc() fails and in ac97_adapter_release() to do
the cleanup.

Found by code review.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
74426fbff66eea8e8d1f42c8238c268d1e63a832 affected < c80f9b3349a99a9d5b295f5bbc23f544c5995ad7
74426fbff66eea8e8d1f42c8238c268d1e63a832 affected < 21f8bc5179bed91c3f946adb5e55d717b891960c
74426fbff66eea8e8d1f42c8238c268d1e63a832 affected < fcc04c92cbb5497ce67c58dd2f0001bb87f40396
74426fbff66eea8e8d1f42c8238c268d1e63a832 affected < cb73d37ac18bc1716690ff5255a0ef1952827e9e
74426fbff66eea8e8d1f42c8238c268d1e63a832 affected < 830988b6cf197e6dcffdfe2008c5738e6c6c3c0f
Linux Linux affected
Version Status Constraints
4.15 affected —
0 unaffected < 4.15
6.1.161 unaffected ≤ 6.1.*
6.6.121 unaffected ≤ 6.6.*
6.12.66 unaffected ≤ 6.12.*
6.18.6 unaffected ≤ 6.18.*
6.19-rc5 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/21f8bc5179bed91c3f946adb5e55d717b891960c cve-icon cve-icon
https://git.kernel.org/stable/c/830988b6cf197e6dcffdfe2008c5738e6c6c3c0f cve-icon cve-icon
https://git.kernel.org/stable/c/c80f9b3349a99a9d5b295f5bbc23f544c5995ad7 cve-icon cve-icon
https://git.kernel.org/stable/c/cb73d37ac18bc1716690ff5255a0ef1952827e9e cve-icon cve-icon
https://git.kernel.org/stable/c/fcc04c92cbb5497ce67c58dd2f0001bb87f40396 cve-icon cve-icon
History

Wed, 04 Feb 2026 16:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in snd_ac97_controller_register() If ac97_add_adapter() fails, put_device() is the correct way to drop the device reference. kfree() is not required. Add kfree() if idr_alloc() fails and in ac97_adapter_release() to do the cleanup. Found by code review.
Title ALSA: ac97: fix a double free in snd_ac97_controller_register()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-02-04T16:00:23.044Z

Reserved: 2026-01-31T11:36:51.189Z

Link: CVE-2025-71192

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-02-04T16:16:18.770

Modified: 2026-02-04T16:33:44.537

Link: CVE-2025-71192

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.