CVE-2026-53291: ALSA: hda/conexant: Fix missing error check for jack detection
ALSA: hda/conexant: Fix missing error check for jack detection
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Compensating control
In cx_probe(), check the return value of snd_hda_jack_detect_enable_callback() using IS_ERR(), and if registration fails propagate the error back to the probe caller using PTR_ERR() (so the jack detection callback is not later handled or accessed when it wasn’t registered).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53291?
The severity of CVE-2026-53291 is rated at 46.
What is the impact of CVE-2026-53291?
CVE-2026-53291 can lead to a failure in jack detection due to an unhandled error check, potentially causing system instability.
How do I fix CVE-2026-53291?
To fix CVE-2026-53291, ensure that the Linux kernel is updated to include the latest patch addressing this vulnerability.
In which versions of Linux Kernel is CVE-2026-53291 applicable?
CVE-2026-53291 is applicable to affected versions of the Linux kernel prior to the implementation of the fix.
Who is affected by CVE-2026-53291?
Users and systems running vulnerable versions of the Linux kernel that utilize ALSA for audio management may be affected by CVE-2026-53291.