CVE-2026-74505
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a UAF. This patch addresses it by doing the almost same cleanup procedure like the normal disconnect phase at the error path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74505
EUVD
EUVD-2026-59698

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Use-After-Free (UAF) vulnerability in the Linux kernel's ALSA 6fire driver. During the probe phase, the driver fails to properly clean up a pending URB (USB Request Block) before freeing resources, which can lead to a UAF condition.

Detection Guidance

This vulnerability is specific to the Linux kernel's ALSA 6fire driver and involves a Use-After-Free (UAF) during error handling. Detection requires checking kernel logs for errors related to the 6fire driver or examining system logs for crashes during driver initialization.

Impact Analysis

A UAF vulnerability could allow an attacker to execute arbitrary code, escalate privileges, or cause system crashes. This may lead to unauthorized access, data corruption, or denial of service on affected systems.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. If updating is not immediately possible, consider disabling the 6fire driver if it is not required for your system.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74505. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart