CVE-2026-53291— ALSA: hda/conexant: Fix missing error check for jack detection
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 21
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | f13b8cb5a6920ad98b751d3134686f29810577d4< 49c2c5924552e1d2f8b635dee663abebbb7cf63b | affected |
2cb659ef0ac744545499e7c37665b276d9e405da< a2a33e87a2ffce3046c574d24eec4390c27c9365 | affected | ||
24d748413cc4e1d97074bae1f335d32d30912f10< d68f753d89f4ef6e410d7e8b7e8ab2fdde921b80 | affected | ||
7aeb259086487417f0fecf66e325bee133e8813a< dd110cc00cf854a8ecd8d003127a4178c28574ea | affected | ||
7aeb259086487417f0fecf66e325bee133e8813a< f837c7b85143a7c54140ff41ad5c076b73cd9933 | affected | ||
7aeb259086487417f0fecf66e325bee133e8813a< 1da5c73f3793b224696617a2a21def7500ba18d6 | affected | ||
7aeb259086487417f0fecf66e325bee133e8813a< b0e2333a231107adedd38c6fcfe1adc6162716fc | affected | ||
4a28302b2c681e3cf85e3b41231fff363c4c6a0e | affected | ||
| … +13 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-53291
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ALSA: hda/conexant: Fix missing error check for jack detection
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/conexant: Fix missing error check for jack detection In cx_probe(), the return value of snd_hda_jack_detect_enable_callback() is ignored. This function returns a pointer, and if it fails (e.g., due to memory allocation failure), it returns an error pointer which must be checked using IS_ERR(). If the registration fails, the driver continues to probe, but the jack detection callback will not be registered. This can lead to a kernel crash later when the driver attempts to handle jack events or accesses the uninitialized structure. Check the return value using IS_ERR() and propagate the error via PTR_ERR() to the probe caller.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会开源的操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在cx_probe()中忽略了对snd_hda_jack_detect_enable_callback()返回值的检查，可能导致内核崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-53291
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-53291
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-53291 (7)
Same Patch Batch · Linux · 2026-06-26 · 47 CVEs total
| CVE-2026-53309 | 9.8 CRITICAL | ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison |
| CVE-2026-53322 | 8.8 HIGH | vfio/pci: Clean up DMABUFs before disabling function |
| CVE-2026-53281 | 8.8 HIGH | iommu/vt-d: Avoid NULL pointer dereference or refcount corruption |
| CVE-2026-53300 | 7.8 HIGH | net: enetc: fix NTMP DMA use-after-free issue |
| CVE-2026-53290 | 7.8 HIGH | drm/xe/eustall: Fix drm_dev_put called before stream disable in close |
| CVE-2026-53284 | 7.5 HIGH | btrfs: only release the dirty pages io tree after successful writes |
| CVE-2026-53278 | arm_mpam: Check whether the config array is allocated before destroying it | |
| CVE-2026-53289 | ice: fix NULL pointer dereference in ice_reset_all_vfs() | |
| CVE-2026-53283 | iommu/amd: Bounds-check devid in __rlookup_amd_iommu() | |
| CVE-2026-53280 | iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() | |
| CVE-2026-53282 | x86/kexec: Push kjump return address even for non-kjump kexec | |
| CVE-2026-53279 | drm/gma500/oaktrail_lvds: fix hang on init failure | |
| CVE-2026-53292 | net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind | |
| CVE-2026-53293 | drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG | |
| CVE-2026-53294 | mailbox: mailbox-test: don't free the reused channel | |
| CVE-2026-53295 | mailbox: add sanity check for channel array | |
| CVE-2026-53296 | mailbox: mailbox-test: free channels on probe error | |
| CVE-2026-53297 | net: mana: Guard mana_remove against double invocation | |
| CVE-2026-53298 | net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() | |
| CVE-2026-53299 | net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx() |
Showing top 20 of 47 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2024-14040
net: nexthop: Increase weight to u16 - CVE-2026-64530
net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_han - CVE-2026-64529
crypto: qat - remove unused character device and IOCTLs - CVE-2026-64528
tty: serial: samsung: Remove redundant port lock acquisition - CVE-2026-64527
drm/hyperv: validate VMBus packet size in receive callback
Same vendor: Linux
- CVE-2024-14040
net: nexthop: Increase weight to u16 - CVE-2026-64530
net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_han - CVE-2026-64529
crypto: qat - remove unused character device and IOCTLs - CVE-2026-64528
tty: serial: samsung: Remove redundant port lock acquisition - CVE-2026-64527
drm/hyperv: validate VMBus packet size in receive callback
V. Comments for CVE-2026-53291
No comments yet