{"schema_version":"1.7.5","id":"CVE-2026-45992","published":"2026-05-27T12:55:45.563Z","modified":"2026-07-08T08:13:41.713752972Z","related":["openSUSE-SU-2026:10954-1"],"summary":"ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: caiaq: Fix potentially leftover ep1_in_urb at error path\n\nThe previous fix for handling the error from setup_card() missed that\nan internal URB cdev->ep1_in_urb might have been already submitted\nbeforehand.  In the normal case, this URB gets killed at the\ndisconnection, but in the error path, we didn't do it, hence there can\nbe a potential leak.\n\nFix it in the error path for setup_card(), too.","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"da938aa9fc7826901921dcea225948ab21a97e45"},{"fixed":"2d42c3386b7389d33caea7184cdb0188997fa6a9"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"09616e25f502080ba684fc7fcf959d1376ab756d"},{"fixed":"d50223ae98148fcc3bba18e718e4b0608df83bce"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"b956e48371f2ff72b76be9a829800ecec963bd45"},{"fixed":"089940d969e13e129b54f104a578cbafd99e308b"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"f537e3ad69609f6924a4db6b4a7f6561f5288bdd"},{"fixed":"be62c8bb03b6aec3790a943d4a7567d4d73b8be9"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6251e3e256337a30160ef59ab1580dde4d1acd28"},{"fixed":"e0fb842af7052f0ab9e709db0c59300aa4051fc0"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"e59ecd4ee3a450db6cb4e4ecaa3efdd593f80056"},{"fixed":"1d160e30aa42b7c41163e51366bb34432367260d"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"096dd8519cf2f768e9e14f224b627f7aaee1a9c5"},{"fixed":"438ab932dc6fef5b001dfeba08a18a491edc8f7b"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"28abd224db4a49560b452115bca3672a20e45b2f"},{"fixed":"0a7b5221b5b51cc798fcfc3be00d02eade149d69"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45992.json"}}],"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/089940d969e13e129b54f104a578cbafd99e308b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/0a7b5221b5b51cc798fcfc3be00d02eade149d69"},{"type":"WEB","url":"https://git.kernel.org/stable/c/1d160e30aa42b7c41163e51366bb34432367260d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2d42c3386b7389d33caea7184cdb0188997fa6a9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/438ab932dc6fef5b001dfeba08a18a491edc8f7b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/be62c8bb03b6aec3790a943d4a7567d4d73b8be9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d50223ae98148fcc3bba18e718e4b0608df83bce"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e0fb842af7052f0ab9e709db0c59300aa4051fc0"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45992.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45992"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45992.json"}}