CVE-2026-46048 ALSA: caiaq: fix usb_dev refcount leak on probe failure

🗓️ 27 May 2026 12:57:04Reported by GoogleType

osv

osv🔗 osv.dev👁 4 Views

ALSA caiaq fixes usb_dev leak on failure by moving private_free to create_card after usb_get_dev.

Reporter	Title	Published	Views	Family All 52
attackerkb	CVE-2026-46048	27 May 202612:57	–	attackerkb
astralinux	Astra Linux – Vulnerability in Linux 5.10	19 Jun 202611:10	–	astralinux
cbl_mariner	CVE-2026-46048 affecting package kernel for versions less than 6.6.141.1-1	22 Jun 202621:21	–	cbl_mariner
circl	CVE-2026-46048	2 Jul 202606:48	–	circl
cnnvd	Linux kernel 安全漏洞	27 May 202600:00	–	cnnvd
cve	CVE-2026-46048	27 May 202612:57	–	cve
cvelist	CVE-2026-46048 ALSA: caiaq: fix usb_dev refcount leak on probe failure	27 May 202612:57	–	cvelist
debiancve	CVE-2026-46048	27 May 202612:57	–	debiancve
oraclelinux	Unbreakable Enterprise kernel security update	2 Jul 202600:00	–	oraclelinux
euvd	EUVD-2026-32430	27 May 202612:57	–	euvd

Source	Link
git	www.git.kernel.org/stable/c/21ca595aafa40d3ac70eab1f4cb62cc00ca21657
git	www.git.kernel.org/stable/c/50c6a1f05973f56d23280c9d7645a7a5734e0907
git	www.git.kernel.org/stable/c/6153878c5255bb69b7d0868105ca078ef13cbcf8
git	www.git.kernel.org/stable/c/6fa8dff64fb6c401ced40a05797b327659317498
git	www.git.kernel.org/stable/c/7a5f1cd22d47f8ca4b760b6334378ae42c1bd24b
git	www.git.kernel.org/stable/c/a8d907acc3e5a078c2e5637ff60c30c6d2ddc23a
git	www.git.kernel.org/stable/c/c874db8a1d2f9f08161470d00cfe8db2f5cca2cc
git	www.git.kernel.org/stable/c/da3b8fd6a202d94fef11a443abc9171c52426a1c
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46048.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-46048

15 Jul 2026 01:49Current

6Medium risk

Vulners AI Score6

CVSS 3.15.5

EPSS0.00123

caiaq usb device leak probe failure create_card after usb_get_dev