CVE-2026-64481
Received Received - Intake

Memory Leak in Linux Kernel ALSA CS35L41 Driver

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41_hda creates ALSA controls whose private data points at the cs35l41_hda object. The firmware load control can also queue fw_load_work. Those controls are not removed on component unbind, and device remove only cancels fw_load_work through cs35l41_remove_dsp(). That helper is skipped when halo_initialized is false. With firmware_autostart disabled, a firmware load can be requested before the DSP has been initialized. If the component or device is removed before the queued work runs, the worker can run after teardown and dereference driver state that is no longer valid. Track the created controls and remove them on unbind so no new control callback can reach the driver data or queue more work. Then cancel fw_load_work to drain any request that was already queued. Also cancel the work unconditionally during device remove before runtime PM teardown.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-07-25
AI Q&A
2026-07-25
EPSS Evaluated
N/A
NVD
CVE-2026-64481
EUVD
EUVD-2026-48825

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling of firmware load work during device teardown. The cs35l41_hda driver creates ALSA controls that reference its private data. If the device or component is removed before firmware loading completes, a queued work item may attempt to access freed memory, leading to potential crashes or undefined behavior.

Detection Guidance

This vulnerability is specific to the Linux kernel's ALSA HDA CS35L41 driver and cannot be detected via network scans. Check kernel logs for CS35L41-related errors or warnings using dmesg | grep cs35l41 or journalctl -k | grep cs35l41.

Impact Analysis

If exploited, this flaw could cause system instability, crashes, or unexpected behavior when removing audio devices using the cs35l41_hda driver. It may lead to denial-of-service conditions or require a reboot to recover.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-64481. Monitor kernel updates from your distribution vendor and apply them promptly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64481. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart