01 Record

CVE-2026-31581

ALSA: 6fire: fix use-after-free on disconnect

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

ALSA: 6fire: fix use-after-free on disconnect

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 2.9% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-04-24 14:42Z4 MO AGO

Last updated

2026-06-14 17:42Z2 MO AGO

Reserved

2026-03-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-416Use After FreeVariant
CWE-825Expired Pointer DereferenceBase

Data version

5.2

Document digest

41d948da3f1f1abbfa1557ab68eda64967bf30174958ddc87edb1a21cad56e92

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf2d06d4e129e2508e356136f99bb20a332ff1a00 to < e719232f4552e29de8027a83918ea94434be87af, b889a7d68d7e76b8795b754a75c91a2d561d5e8c to < e247a0e01d15ed420f77ec5e2335721bf430a5b3, ea8cc56db659cf0ae57073e32a4735ead7bd7ee3 to < ba88461f7653636c48321ca993006a74724c2f41, b754e831a94f82f2593af806741392903f359168 to < e88354b381e2006de63d6b052ed7005c9a47d00e, 57860a80f03f9dc69a34a5c37b0941ad032a0a8c to < af75b486f7e883e3422ece23c8d727e6815144a0, a0810c3d6dd2d29a9b92604d682eacd2902ce947 to < d21e8a2af4869b5890b34e081d5aeadc93e9cd5c, a0810c3d6dd2d29a9b92604d682eacd2902ce947 to < 3dc20d1981d6a67d8184498a5da272942dde1e65, a0810c3d6dd2d29a9b92604d682eacd2902ce947 to < 51f6532790b74ffdd6970bc848358a2838c1c185, a0810c3d6dd2d29a9b92604d682eacd2902ce947 to < b9c826916fdce6419b94eb0cd8810fdac18c2386, 74357d0b5cd3ef544752bc9f21cbeee4902fae6c, 273eec23467dfbfbd0e4c10302579ba441fb1e13, 0df7f4b5cc10f5adf98be0845372e9eef7bb5b09, 5.10.231 to < 5.10.258, 5.15.174 to < 5.15.209, 6.1.120 to < 6.1.175, 6.6.64 to < 6.6.136, 6.12.2 to < 6.12.83, 4.19.325 to < 4.20, 5.4.287 to < 5.5, 6.11.11 to < 6.12, 6.13—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/e719232f4552e29de8027a83918ea94434be87af
git.kernel.orghttps://git.kernel.org/stable/c/e247a0e01d15ed420f77ec5e2335721bf430a5b3
git.kernel.orghttps://git.kernel.org/stable/c/ba88461f7653636c48321ca993006a74724c2f41
git.kernel.orghttps://git.kernel.org/stable/c/e88354b381e2006de63d6b052ed7005c9a47d00e
git.kernel.orghttps://git.kernel.org/stable/c/af75b486f7e883e3422ece23c8d727e6815144a0
git.kernel.orghttps://git.kernel.org/stable/c/d21e8a2af4869b5890b34e081d5aeadc93e9cd5c
git.kernel.orghttps://git.kernel.org/stable/c/3dc20d1981d6a67d8184498a5da272942dde1e65
git.kernel.orghttps://git.kernel.org/stable/c/51f6532790b74ffdd6970bc848358a2838c1c185
git.kernel.orghttps://git.kernel.org/stable/c/b9c826916fdce6419b94eb0cd8810fdac18c2386

01 Record index

CVE-2026-31581

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-31581

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References