Heimdall Security Logo

CVE-2026-31581

Vulnérabilité non évaluée dans Linux (Linux)

CVSS 0.0 · Non évaluée
EPSS 0.1%
Linux•Linux•Versions : <51f6532790b74ffdd6970bc848358a2838c1c185, <b9c826916fdce6419b94eb0cd8810fdac18c2386, <e719232f4552e29de8027a83918ea94434be87af, 6.13, <=6.1.*, <=6.12.*, a0810c3d6dd2d29a9b92604d682eacd2902ce947, <=7.0.*, <e88354b381e2006de63d6b052ed7005c9a47d00e, 0, <ba88461f7653636c48321ca993006a74724c2f41, 0df7f4b5cc10f5adf98be0845372e9eef7bb5b09, 6.1.120, <6.12.83, <6.13, 6.12.83, 7.0.1, 5.10.231, 5.15.174, <6.6.136, 6.12.2, 6.6.64, ea8cc56db659cf0ae57073e32a4735ead7bd7ee3, <af75b486f7e883e3422ece23c8d727e6815144a0, <3dc20d1981d6a67d8184498a5da272942dde1e65, 5.15.209, <4.20, <=5.10.*, 273eec23467dfbfbd0e4c10302579ba441fb1e13, b889a7d68d7e76b8795b754a75c91a2d561d5e8c, 6.1.175, <5.10.258, <=6.6.*, <6.12, 6.6.136, <=6.19.*, <d21e8a2af4869b5890b34e081d5aeadc93e9cd5c, <e247a0e01d15ed420f77ec5e2335721bf430a5b3, <5.5, 7.1, 6.11.11, <=6.18.*, 57860a80f03f9dc69a34a5c37b0941ad032a0a8c, 74357d0b5cd3ef544752bc9f21cbeee4902fae6c, 5.10.258, <=*, 6.19.14, <5.15.209, <=5.15.*, f2d06d4e129e2508e356136f99bb20a332ff1a00, 5.4.287, <6.1.175, b754e831a94f82f2593af806741392903f359168, 6.18.24, 4.19.325

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix use-after-free on disconnect In usb6fire_chip_abort(), the chip struct is allocated as the card's private data (via snd_card_new with sizeof(struct sfire_chip)). When snd_card_free_when_closed() is called and no file handles are open, the card and embedded chip are freed synchronously. The subsequent chip->card = NULL write then hits freed slab memory. Call trace: usb6fire_chip_abort sound/usb/6fire/chip.c:59 [inline] usb6fire_chip_disconnect+0x348/0x358 sound/usb/6fire/chip.c:182 usb_unbind_interface+0x1a8/0x88c drivers/usb/core/driver.c:458 ... hub_event+0x1a04/0x4518 drivers/usb/core/hub.c:5953 Fix by moving the card lifecycle out of usb6fire_chip_abort() and into usb6fire_chip_disconnect(). The card pointer is saved in a local before any teardown, snd_card_disconnect() is called first to prevent new opens, URBs are aborted while chip is still valid, and snd_card_free_when_closed() is called last so chip is never accessed after the card may be freed.

Gravité et risque d'exploitation

CVE-2026-31581 obtient un score CVSS de 0.0/10, soit une gravité non évaluée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.13 %, ce qui la place devant 2.2 % des CVE référencées.

Que faire ?

  • Vérifiez si Linux (versions <51f6532790b74ffdd6970bc848358a2838c1c185, <b9c826916fdce6419b94eb0cd8810fdac18c2386, <e719232f4552e29de8027a83918ea94434be87af, 6.13, <=6.1.*, <=6.12.*, a0810c3d6dd2d29a9b92604d682eacd2902ce947, <=7.0.*, <e88354b381e2006de63d6b052ed7005c9a47d00e, 0, <ba88461f7653636c48321ca993006a74724c2f41, 0df7f4b5cc10f5adf98be0845372e9eef7bb5b09, 6.1.120, <6.12.83, <6.13, 6.12.83, 7.0.1, 5.10.231, 5.15.174, <6.6.136, 6.12.2, 6.6.64, ea8cc56db659cf0ae57073e32a4735ead7bd7ee3, <af75b486f7e883e3422ece23c8d727e6815144a0, <3dc20d1981d6a67d8184498a5da272942dde1e65, 5.15.209, <4.20, <=5.10.*, 273eec23467dfbfbd0e4c10302579ba441fb1e13, b889a7d68d7e76b8795b754a75c91a2d561d5e8c, 6.1.175, <5.10.258, <=6.6.*, <6.12, 6.6.136, <=6.19.*, <d21e8a2af4869b5890b34e081d5aeadc93e9cd5c, <e247a0e01d15ed420f77ec5e2335721bf430a5b3, <5.5, 7.1, 6.11.11, <=6.18.*, 57860a80f03f9dc69a34a5c37b0941ad032a0a8c, 74357d0b5cd3ef544752bc9f21cbeee4902fae6c, 5.10.258, <=*, 6.19.14, <5.15.209, <=5.15.*, f2d06d4e129e2508e356136f99bb20a332ff1a00, 5.4.287, <6.1.175, b754e831a94f82f2593af806741392903f359168, 6.18.24, 4.19.325) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE