CVE-2026-90119: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup
ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.157.1-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Upgrade
Upgrade
debian/linux-6.12to a version that resolves this vulnerability.Fixed in 6.12.113-1~deb12u1 - Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-42.42 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1 - Compensating control
In snd_ice1712_probe(), use snd_devm_card_new() with scope-based cleanup via __free(snd_card_unref), and clear the card pointer after successful registration so the card remains alive.
Event History
Frequently Asked Questions
When can this resource leak occur?
It can occur when the ice1712 driver's probe routine fails during initialization after creating the ALSA card but before successful card registration.
Which systems are exposed?
Systems using the Linux ALSA ice1712 driver are affected when the driver is probed and encounters one of the relevant later initialization failures.
What should be done if patching cannot be applied immediately?
The provided information does not identify a configuration workaround. Avoiding failed probe attempts for the affected ice1712 driver may limit exposure to the leak until an update containing the fix can be deployed.