- 7.0HighCVSS base score
- 0.14%Exploitation in 30 daysEPSS · top 97% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in snd_ac97_controller_register() If ac97_add_adapter() fails, put_device() is the correct way to drop the device reference. kfree() is not required. Add kfree() if idr_alloc() fails and in ac97_adapter_release() to do the cleanup. Found by code review.
Timeline
ID reserved
By Linux
- 4 days later
· 4 days later
Published
- 6 months later
· 6 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Deferred | 3.1 | High7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.14% · top 97% of all CVEs (11 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.0.
Affected products
- affected 74426fbff66eea8e8d1f42c8238c268d1e63a832 – < c80f9b3349a99a9d5b295f5bbc23f544c5995ad7
- affected 74426fbff66eea8e8d1f42c8238c268d1e63a832 – < 21f8bc5179bed91c3f946adb5e55d717b891960c
- affected 74426fbff66eea8e8d1f42c8238c268d1e63a832 – < fcc04c92cbb5497ce67c58dd2f0001bb87f40396
- affected 74426fbff66eea8e8d1f42c8238c268d1e63a832 – < cb73d37ac18bc1716690ff5255a0ef1952827e9e
- affected 74426fbff66eea8e8d1f42c8238c268d1e63a832 – < 830988b6cf197e6dcffdfe2008c5738e6c6c3c0f
- affected 4.15
- unaffected < 4.15
- unaffected 6.1.161 – ≤ 6.1.*
- unaffected 6.6.121 – ≤ 6.6.*
- unaffected 6.12.66 – ≤ 6.12.*
- unaffected 6.18.6 – ≤ 6.18.*
- unaffected 6.19 – ≤ *
References
References5
- https://git.kernel.org/stable/c/c80f9b3349a99a9d5b295f5bbc23f544c5995ad7 (opens in a new tab)
- https://git.kernel.org/stable/c/21f8bc5179bed91c3f946adb5e55d717b891960c (opens in a new tab)
- https://git.kernel.org/stable/c/fcc04c92cbb5497ce67c58dd2f0001bb87f40396 (opens in a new tab)
- https://git.kernel.org/stable/c/cb73d37ac18bc1716690ff5255a0ef1952827e9e (opens in a new tab)
- https://git.kernel.org/stable/c/830988b6cf197e6dcffdfe2008c5738e6c6c3c0f (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-206806 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-71192)Record last updated .