CVE-2026-53291

Analyzed Analyzed - Analysis Complete

Missing Error Check in Conexant HDA Jack Detection Leads to Kernel Crash

Publication date: 2026-06-26

Last updated on: 2026-07-08

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/conexant: Fix missing error check for jack detection In cx_probe(), the return value of snd_hda_jack_detect_enable_callback() is ignored. This function returns a pointer, and if it fails (e.g., due to memory allocation failure), it returns an error pointer which must be checked using IS_ERR(). If the registration fails, the driver continues to probe, but the jack detection callback will not be registered. This can lead to a kernel crash later when the driver attempts to handle jack events or accesses the uninitialized structure. Check the return value using IS_ERR() and propagate the error via PTR_ERR() to the probe caller.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-26

Last Modified

2026-07-08

Generated

2026-07-17

AI Q&A

2026-06-26

EPSS Evaluated

2026-07-15

NVD

CVE-2026-53291

EUVD

EUVD-2026-39896

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	From 6.13 (inc) to 6.18.33 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.10 (exc)
linux	linux_kernel	From 5.15.149 (inc) to 5.15.209 (exc)
linux	linux_kernel	From 6.1.77 (inc) to 6.1.175 (exc)
linux	linux_kernel	From 6.6.16 (inc) to 6.6.141 (exc)
linux	linux_kernel	From 6.7.4 (inc) to 6.12.91 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's ALSA hda/conexant driver. Specifically, in the cx_probe() function, the return value of snd_hda_jack_detect_enable_callback() is not checked. This function returns a pointer that may indicate an error if it fails, such as due to memory allocation failure.

Because the error pointer is not checked using IS_ERR(), the driver may continue probing without properly registering the jack detection callback. This can cause a kernel crash later when the driver tries to handle jack events or access an uninitialized structure.

The fix involves checking the return value with IS_ERR() and propagating the error to the probe caller using PTR_ERR().

Impact Analysis

If this vulnerability is triggered, it can lead to a kernel crash on systems running the affected Linux kernel with the ALSA hda/conexant driver.

A kernel crash can cause system instability, loss of unsaved data, and potential denial of service as the system may need to be rebooted.

Compliance Impact

The provided information does not specify any impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

To mitigate this vulnerability, update your Linux kernel to a version where the ALSA hda/conexant driver includes the fix for the missing error check in jack detection.

The fix involves proper checking of the return value of snd_hda_jack_detect_enable_callback() using IS_ERR() and propagating errors correctly to prevent kernel crashes.

Until the update is applied, avoid using the affected driver or hardware if possible to reduce the risk of kernel crashes caused by unhandled jack detection errors.

Hi! I’m here to help you understand CVE-2026-53291. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70