ASoC: xilinx: formatter_pcm: fix stream_data leak on open error
In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: fix stream_data leak on open error In xlnx_formatter_pcm_open(), stream_data is allocated and adata->play_stream or adata->capture_stream is assigned early. If a later step, such as snd_pcm_hw_constraint_step() or snd_pcm_hw_constraint_integer(), fails, the function returns the error immediately. ALSA does not call the close callback when open fails, so stream_data is leaked and the stream pointer is left dangling, pointing to a substream that ALSA frees. A later interrupt would then call snd_pcm_period_elapsed() on the freed substream. Free stream_data and clear the stream pointer on the error paths.
CVE-2026-90214
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-90214
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
"lessThan": "5e1a2d9fff57f3a2b1a0f54d128d64245a253004",
"versionType": "git"
},
{
"status": "affected",
"version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
"lessThan": "edf81b293cba1b00a5e71becf184414f6991a6ca",
"versionType": "git"
},
{
"status": "affected",
"version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
"lessThan": "3fd89a51b8cfe788df67f54b716b305dd45b8468",
"versionType": "git"
},
{
"status": "affected",
"version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
"lessThan": "8c38ae4a465691947977c25d10394da22a64a19f",
"versionType": "git"
},
{
"status": "affected",
"version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
"lessThan": "9030aa4e14b704dc39ee208207cb65064020d857",
"versionType": "git"
},
{
"status": "affected",
"version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
"lessThan": "8b30628dfc2b2fad3b55a9441776a226035045fa",
"versionType": "git"
},
{
"status": "affected",
"version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
"lessThan": "4e0ce77df7d9808926719d7950a07fbad14ea9ef",
"versionType": "git"
},
{
"status": "affected",
"version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
"lessThan": "b992511180e126150c6ad3580a6fd568c385f4c6",
"versionType": "git"
}
],
"programFiles": [
"sound/soc/xilinx/xlnx_formatter_pcm.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.1"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.1",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.270",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.221",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.188",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.157",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.110",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.52",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.6",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"sound/soc/xilinx/xlnx_formatter_pcm.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-90214
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #36586 · Revision 1
- Added to Heist Feed
- Publisher date