What’s Vulnerable › Vulnerabilities

CVE-2026-90119: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-17 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup snd_ice1712_probe() performs multiple initialization steps after snd_card_new(), but directly returns on failures from later steps without releasing the ALSA card, causing resource leaks when probing fails. Use snd_devm_card_new() together with scope-based cleanup via __free(snd_card_unref), and clear the card pointer after successful registration to keep it alive.

Affected products

• Linux kernel: 5.15 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/24b399f51812d727dc25d7814c4d7e0cca38201e
• https://git.kernel.org/stable/c/b15782627b6562f7b6d628f4699316f26340f835
• https://git.kernel.org/stable/c/c5c7c7b6cfae73c46e4544a9ef08ff89231a670d
• https://git.kernel.org/stable/c/d736eba9c453fedce664fdf592c8b71ecff1932b
• https://git.kernel.org/stable/c/d8ac49391a1562dc784fc91e810e696284cb647e

Get alerted when CVE-2026-90119 or the next vulnerability affects your stack