PT-2026-43871 · Opensuse+1 · Opensuse Tumbleweed+1
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1
Description
A Use-After-Free (UAF) issue exists in the caiaq driver of the Linux kernel. The
setup card() function does not handle error cases gracefully; specifically, when snd card register() returns an error, snd card free() is called, but the function continues execution. This leads to a UAF during subsequent calls, such as snd usb caiaq control init(). Additionally, because setup card() was a void function, it failed to propagate error codes to snd probe(), which is responsible for the proper error path and calling snd card free().Recommendations
For openSUSE Tumbleweed, update to version kernel-devel-7.0.11-1.1.
At the moment, there is no information about a newer version that contains a fix for this vulnerability for the Linux kernel.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Opensuse Tumbleweed