01 Record

CVE-2026-93039

ASoC: meson: Keep link pointers valid on realloc failure

HighPUBLISHEDCNA: Linux

CNA base score7.4 CVSS v3.xCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

ASoC: meson: Keep link pointers valid on realloc failure

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.15% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 5.0% of scored records. A rank, not a probability.
NVD base score: 7.4 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-17 16:10Z1 MO AGO

Last updated

2026-10-19 09:04Z9 DAYS AGO

Reserved

2026-09-17

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.4)

CNA CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-1341Multiple Releases of Same Resource or HandleBase

Data version

5.2

Document digest

8f0e25665312376a3d1ef0b9be0c635a3fac34ead1d95c310af6140110597e1f

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux7864a79f37b55769b817d5e6c5ae0ca4bfdba93b to < de33afc57f24538186bccf4c4f6c65dd38634fd8, 7864a79f37b55769b817d5e6c5ae0ca4bfdba93b to < 1c1485343b7c1c39dab7ecb9cd16ba49fd0ce642, 7864a79f37b55769b817d5e6c5ae0ca4bfdba93b to < 8db0a0fc84e80aa9924e0833aef6cc95df94e5a7, 7864a79f37b55769b817d5e6c5ae0ca4bfdba93b to < 41e92e0caa1fe3df2efaca346bfcaeb7fb9826ab, 7864a79f37b55769b817d5e6c5ae0ca4bfdba93b to < 0b30fbe6bf7cf6499b19dd886f466e7c9e820089, 7864a79f37b55769b817d5e6c5ae0ca4bfdba93b to < 8fec16898f184e5f8f8fdd09ff1ced2bd7ffc13d, 7864a79f37b55769b817d5e6c5ae0ca4bfdba93b to < 5ed1b048527bebe4529eb6e01c34dcc5d97ba5fe, 7864a79f37b55769b817d5e6c5ae0ca4bfdba93b to < 2aaa41cf974f83a6fb105422bac4e2f107150774, 4.19—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/de33afc57f24538186bccf4c4f6c65dd38634fd8
git.kernel.orghttps://git.kernel.org/stable/c/1c1485343b7c1c39dab7ecb9cd16ba49fd0ce642
git.kernel.orghttps://git.kernel.org/stable/c/8db0a0fc84e80aa9924e0833aef6cc95df94e5a7
git.kernel.orghttps://git.kernel.org/stable/c/41e92e0caa1fe3df2efaca346bfcaeb7fb9826ab
git.kernel.orghttps://git.kernel.org/stable/c/0b30fbe6bf7cf6499b19dd886f466e7c9e820089
git.kernel.orghttps://git.kernel.org/stable/c/8fec16898f184e5f8f8fdd09ff1ced2bd7ffc13d
git.kernel.orghttps://git.kernel.org/stable/c/5ed1b048527bebe4529eb6e01c34dcc5d97ba5fe
git.kernel.orghttps://git.kernel.org/stable/c/2aaa41cf974f83a6fb105422bac4e2f107150774

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.