CVE-2026-90119

Source
https://cve.org/CVERecord?id=CVE-2026-90119
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90119.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-90119
Downstream
Published
2026-09-17T16:06:23Z
Modified
2026-09-18T03:48:35Z
Summary
ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup
Details

In the Linux kernel, the following vulnerability has been resolved:

ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup

snd_ice1712_probe() performs multiple initialization steps after snd_card_new(), but directly returns on failures from later steps without releasing the ALSA card, causing resource leaks when probing fails.

Use snd_devm_card_new() together with scope-based cleanup via __free(snd_card_unref), and clear the card pointer after successful registration to keep it alive.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90119.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ca642da4b33d385c5a633287e1c4155f1ea09638
Fixed
c5c7c7b6cfae73c46e4544a9ef08ff89231a670d
Fixed
d8ac49391a1562dc784fc91e810e696284cb647e
Fixed
b15782627b6562f7b6d628f4699316f26340f835
Fixed
24b399f51812d727dc25d7814c4d7e0cca38201e
Fixed
d736eba9c453fedce664fdf592c8b71ecff1932b

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90119.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.15.0
Fixed
6.6.157
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.110
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.52
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90119.json"