CVE-2026-90214ASoC: xilinx: formatter_pcm: fix stream_data leak on open error
- —Not scoredno CVSS score yet
- 0.22%Exploitation in 30 daysEPSS · top 87% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: fix stream_data leak on open error In xlnx_formatter_pcm_open(), stream_data is allocated and adata->play_stream or adata->capture_stream is assigned early. If a later step, such as snd_pcm_hw_constraint_step() or snd_pcm_hw_constraint_integer(), fails, the function returns the error immediately. ALSA does not call the close callback when open fails, so stream_data is leaked and the stream pointer is left dangling, pointing to a substream that ALSA frees. A later interrupt would then call snd_pcm_period_elapsed() on the freed substream. Free stream_data and clear the stream pointer on the error paths.
Timeline
ID reserved
By Linux
- 6 days later
· 6 days later
Published
- 32 days later
· 32 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.22% · top 87% of all CVEs (15 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a – < 5e1a2d9fff57f3a2b1a0f54d128d64245a253004
- affected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a – < edf81b293cba1b00a5e71becf184414f6991a6ca
- affected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a – < 3fd89a51b8cfe788df67f54b716b305dd45b8468
- affected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a – < 8c38ae4a465691947977c25d10394da22a64a19f
- affected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a – < 9030aa4e14b704dc39ee208207cb65064020d857
- affected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a – < 8b30628dfc2b2fad3b55a9441776a226035045fa
- affected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a – < 4e0ce77df7d9808926719d7950a07fbad14ea9ef
- affected 6f6c3c36f0917be24587eeba818ab4fdfcb5465a – < b992511180e126150c6ad3580a6fd568c385f4c6
- affected 5.1
- unaffected < 5.1
- unaffected 5.10.270 – ≤ 5.10.*
- unaffected 5.15.221 – ≤ 5.15.*
- unaffected 6.1.188 – ≤ 6.1.*
- unaffected 6.6.157 – ≤ 6.6.*
- unaffected 6.12.110 – ≤ 6.12.*
- unaffected 6.18.52 – ≤ 6.18.*
- unaffected 7.2.6 – ≤ 7.2.*
- unaffected 7.3 – ≤ *
References
References8
- https://git.kernel.org/stable/c/5e1a2d9fff57f3a2b1a0f54d128d64245a253004 (opens in a new tab)
- https://git.kernel.org/stable/c/edf81b293cba1b00a5e71becf184414f6991a6ca (opens in a new tab)
- https://git.kernel.org/stable/c/3fd89a51b8cfe788df67f54b716b305dd45b8468 (opens in a new tab)
- https://git.kernel.org/stable/c/8c38ae4a465691947977c25d10394da22a64a19f (opens in a new tab)
- https://git.kernel.org/stable/c/9030aa4e14b704dc39ee208207cb65064020d857 (opens in a new tab)
- https://git.kernel.org/stable/c/8b30628dfc2b2fad3b55a9441776a226035045fa (opens in a new tab)
- https://git.kernel.org/stable/c/4e0ce77df7d9808926719d7950a07fbad14ea9ef (opens in a new tab)
- https://git.kernel.org/stable/c/b992511180e126150c6ad3580a6fd568c385f4c6 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-81807 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-90214)Record last updated .