CVE-2026-74505

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-08-15 Modified: 2026-11-06 First seen: 2026-11-06 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a UAF. This patch addresses it by doing the almost same cleanup procedure like the normal disconnect phase at the error path.

Affected Software (9)

VendorProductVersion
Linux Linux c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < d41bfea14ee6e063a953f6e72046088737c4e66c
Linux Linux c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < 8b7ecb2446845fa8d1f1ce9aac6307caac50cfd5
Linux Linux c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < a0bb5b9d39e54888385dc399c899223299201fe6
Linux Linux c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < 49bc7741cd2761c703a292dc69245041ae8a67bd
Linux Linux c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < 2de734dcbb210bd59983e13d36988acbcc122194
Linux Linux c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < 11e2953d9f4c7c3d2af94a889c2d805c537d633f
Linux Linux c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < 630c8d6a93cbd9b2a207f1a67ef1fd21af098b0c
Linux Linux c6d43ba816d1cf1d125bfbfc938f2a28a87facf9 < a54bf16965f896415c3337bc4fbb40fb11941d99
Linux Linux 2.6.39

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.18%
Raw Score 0.001770
Percentile 7.3%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00177
2026-11-12
0.00177
2026-11-10
0.00177
2026-11-09
0.00177
2026-11-08
0.00177
2026-11-07
0.00177
2026-11-06
0.00177

Intelligence Sources

mitre ref →
nvd ref →