Heimdall Security Logo

CVE-2026-53242

Vulnérabilité élevée dans Linux (Linux)

CVSS 7.8 · Élevée
EPSS 0.1%
Linux•Linux•Versions : 9b1dbd69ba6f8f8c69bc7b77c2ce3b9c6ed05ba6, <6.1.176, <=6.1.*, <=7.0.*, <06eca2235a3fd281dddf25b0a97772b25b5bb573, <=6.12.*, 6.12.94, 6.12.78, <6.6.143, 0, <6.12.94, 7.0, <d68b621bb5a48051932f1017a6e1bc9b18f854d0, 6.1.176, 629cf09464cf98670996ea5c191dc9743e6f3f00, ae8f8d30d334bad5b1b3cdb1eb8a0b771f55e432, 6.18.19, <=5.10.*, 9baee36e8c5443411c4629afabafaff8a46a23fd, <=6.6.*, <5.10.259, 7.0.13, <cac5bf3500ee6422cf64e0df0b5daeecfed42917, <7.0, 6.18.36, <d842f26a167e77a36f3ed333b9fa99d36ef99fe6, <6.20, 6.19.9, 7.1, <88fe2e3658726cb21ff2dcf9770bf672f9b9d31b, fc71f888994569f87d5bee20b1ac6c9c1e3a7a79, <cd98837db15f323463b8df07282ac723bd5c3fed, <b053fcd8912f06c30f932f5b8ec41c72de474695, <=6.18.*, <6.18.36, 6.1.167, c2f64e05a0587a83ec42dbd6b7a7ded79b2ff694, f2cb2e0d27fb925c73a78f0ce7d6dbf68d3747c1, <=*, 5.10.253, 6.6.143, 6.6.130, <7c71a9522555ff137a9ca36b15d759ca04d84788, 4a758e9a1f5ed722f83c4dd35f867fe811553bcb, 5.10.259

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams snd_pcm_drain() uses init_waitqueue_entry which does not clear entry.prev/next, and add_wait_queue with a conditional remove_wait_queue that is skipped when to_check is no longer in the group after concurrent UNLINK. The orphaned wait entry remains on the unlinked substream sleep queue. On the next drain iteration, add_wait_queue adds the entry to a new queue while still linked on the old one, corrupting both lists. A subsequent wake_up dereferences NULL at the func pointer (mapped from the spinlock at offset 0 of the misinterpreted wait_queue_head_t), causing a kernel panic. Replace init_waitqueue_entry/add_wait_queue/conditional remove_wait_queue with init_wait_entry/prepare_to_wait/ finish_wait. init_wait_entry clears prev/next via INIT_LIST_HEAD on each iteration and sets autoremove_wake_function which auto-removes the entry on wake-up. finish_wait safely handles both the already-removed and still-queued cases.

Gravité et risque d'exploitation

CVE-2026-53242 obtient un score CVSS de 7.8/10, soit une gravité élevée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.13 %, ce qui la place devant 2.4 % des CVE référencées.

Que faire ?

  • Vérifiez si Linux (versions 9b1dbd69ba6f8f8c69bc7b77c2ce3b9c6ed05ba6, <6.1.176, <=6.1.*, <=7.0.*, <06eca2235a3fd281dddf25b0a97772b25b5bb573, <=6.12.*, 6.12.94, 6.12.78, <6.6.143, 0, <6.12.94, 7.0, <d68b621bb5a48051932f1017a6e1bc9b18f854d0, 6.1.176, 629cf09464cf98670996ea5c191dc9743e6f3f00, ae8f8d30d334bad5b1b3cdb1eb8a0b771f55e432, 6.18.19, <=5.10.*, 9baee36e8c5443411c4629afabafaff8a46a23fd, <=6.6.*, <5.10.259, 7.0.13, <cac5bf3500ee6422cf64e0df0b5daeecfed42917, <7.0, 6.18.36, <d842f26a167e77a36f3ed333b9fa99d36ef99fe6, <6.20, 6.19.9, 7.1, <88fe2e3658726cb21ff2dcf9770bf672f9b9d31b, fc71f888994569f87d5bee20b1ac6c9c1e3a7a79, <cd98837db15f323463b8df07282ac723bd5c3fed, <b053fcd8912f06c30f932f5b8ec41c72de474695, <=6.18.*, <6.18.36, 6.1.167, c2f64e05a0587a83ec42dbd6b7a7ded79b2ff694, f2cb2e0d27fb925c73a78f0ce7d6dbf68d3747c1, <=*, 5.10.253, 6.6.143, 6.6.130, <7c71a9522555ff137a9ca36b15d759ca04d84788, 4a758e9a1f5ed722f83c4dd35f867fe811553bcb, 5.10.259) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE