In the Linux kernel, the following vulnerability has been resolved:

ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path

The previous fix for handling the error from setup_card() missed that
an internal URB cdev->ep1_in_urb might have been already submitted
beforehand. In the normal case, this URB gets killed at the
disconnection, but in the error path, we didn't do it, hence there can
be a potential leak.

Fix it in the error path for setup_card(), too.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
f537e3ad69609f6924a4db6b4a7f6561f5288bdd affected < be62c8bb03b6aec3790a943d4a7567d4d73b8be9
6251e3e256337a30160ef59ab1580dde4d1acd28 affected < e0fb842af7052f0ab9e709db0c59300aa4051fc0
e59ecd4ee3a450db6cb4e4ecaa3efdd593f80056 affected < 1d160e30aa42b7c41163e51366bb34432367260d
096dd8519cf2f768e9e14f224b627f7aaee1a9c5 affected < 438ab932dc6fef5b001dfeba08a18a491edc8f7b
28abd224db4a49560b452115bca3672a20e45b2f affected < 0a7b5221b5b51cc798fcfc3be00d02eade149d69
Linux Linux affected
Version Status Constraints
7.1-rc1 affected —
0 unaffected < 7.1-rc1
7.1-rc2 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0a7b5221b5b51cc798fcfc3be00d02eade149d69 cve-icon cve-icon
https://git.kernel.org/stable/c/1d160e30aa42b7c41163e51366bb34432367260d cve-icon cve-icon
https://git.kernel.org/stable/c/438ab932dc6fef5b001dfeba08a18a491edc8f7b cve-icon cve-icon
https://git.kernel.org/stable/c/be62c8bb03b6aec3790a943d4a7567d4d73b8be9 cve-icon cve-icon
https://git.kernel.org/stable/c/e0fb842af7052f0ab9e709db0c59300aa4051fc0 cve-icon cve-icon
History

Wed, 27 May 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401

Wed, 27 May 2026 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path The previous fix for handling the error from setup_card() missed that an internal URB cdev->ep1_in_urb might have been already submitted beforehand. In the normal case, this URB gets killed at the disconnection, but in the error path, we didn't do it, hence there can be a potential leak. Fix it in the error path for setup_card(), too.
Title ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-27T12:55:45.563Z

Reserved: 2026-05-13T15:03:33.091Z

Link: CVE-2026-45992

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-27T14:17:16.747

Modified: 2026-05-27T14:48:03.013

Link: CVE-2026-45992

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-27T17:15:38Z

Weaknesses

No weakness.