Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Published: 2026-05-27
Score: 5.5 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to the latest stable release that contains the ALSA caiaq driver fix.
  • If an immediate kernel upgrade is not possible, prevent loading the caiaq driver for devices that could trigger the error path by adding a blacklist entry or disabling the relevant hardware.
  • Reboot the system after applying the patch or blacklist to ensure all driver instances are re‑initialized.

Generated by OpenCVE AI on May 28, 2026 at 05:28 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 15 Jun 2026 10:30:00 +0000

Type Values Removed Values Added
References

Mon, 15 Jun 2026 10:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path The previous fix for handling the error from setup_card() missed that an internal URB cdev->ep1_in_urb might have been already submitted beforehand. In the normal case, this URB gets killed at the disconnection, but in the error path, we didn't do it, hence there can be a potential leak. Fix it in the error path for setup_card(), too. This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Title ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path kernel: ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Mon, 01 Jun 2026 17:00:00 +0000

Type Values Removed Values Added
References

Thu, 28 May 2026 04:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401

Thu, 28 May 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-772
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Wed, 27 May 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401

Wed, 27 May 2026 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path The previous fix for handling the error from setup_card() missed that an internal URB cdev->ep1_in_urb might have been already submitted beforehand. In the normal case, this URB gets killed at the disconnection, but in the error path, we didn't do it, hence there can be a potential leak. Fix it in the error path for setup_card(), too.
Title ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: REJECTED

Assigner: Linux

Published:

Updated: 2026-06-15T08:05:14.376Z

Reserved: 2026-05-13T15:03:33.091Z

Link: CVE-2026-45992

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Rejected

Published: 2026-05-27T14:17:16.747

Modified: 2026-06-15T10:16:28.383

Link: CVE-2026-45992

cve-icon Redhat

Severity : Low

Publid Date: 2026-05-27T00:00:00Z

Links: CVE-2026-45992 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-05-28T05:30:06Z

Weaknesses
  • CWE-772

    Missing Release of Resource after Effective Lifetime