CVE-2025-71192 addresses a double-free vulnerability within the Linux kernel's ALSA AC97 audio driver, specifically in the snd_ac97_controller_register() function. This flaw arises from incorrect memory deallocation logic when ac97_add_adapter() fails, leading to a potential memory corruption issue. While a CVSS score is not available, its FAUCET Risk Score of 16/100 suggests a low to moderate severity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 4.15CNA affecteddefault affected | |
| Linux | Linux | >= 74426fbff66eea8e8d1f42c8238c268d1e63a832, < 21f8bc5179bed91c3f946adb5e55d717b891960c, >= 74426fbff66eea8e8d1f42c8238c268d1e63a832, < 830988b6cf197e6dcffdfe2008c5738e6c6c3c0f, >= 74426fbff66eea8e8d1f42c8238c268d1e63a832, < c80f9b3349a99a9d5b295f5bbc23f544c5995ad7, >= 74426fbff66eea8e8d1f42c8238c268d1e63a832, < cb73d37ac18bc1716690ff5255a0ef1952827e9e, >= 74426fbff66eea8e8d1f42c8238c268d1e63a832, < fcc04c92cbb5497ce67c58dd2f0001bb87f40396CNA affecteddefault unaffected |
CVSS data has not been published for this CVE.
No social media mentions found for this CVE.
No media coverage found for this CVE.
Linux kernel (Azure CVM) vulnerabilities
Jul 24, 2026Linux kernel (Azure) vulnerabilities
Jul 24, 2026Linux kernel (OEM) vulnerabilities
Jul 23, 2026Linux kernel vulnerabilities
Jul 20, 2026Linux kernel (Xilinx) vulnerabilities
Jul 2, 2026Linux kernel (Azure) vulnerabilities
May 26, 2026Linux kernel (NVIDIA) vulnerabilities
May 25, 2026Linux kernel (NVIDIA Tegra) vulnerabilities
May 25, 2026Linux kernel (NVIDIA) vulnerabilities
May 20, 2026Linux kernel vulnerabilities
May 19, 2026kernel: ALSA: ac97: fix a double free in snd_ac97_controller_register()
Feb 4, 2026