CVE-2026-53291 ALSA: hda/conexant: Fix missing error check for jack detection
A missing error check in the Conexant HDA driver can cause a kernel crash when jack detection fails, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-53291?
CVE-2026-53291 is a medium-severity vulnerability in Linux kernel, published on 26 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda/conexant: Fix missing error check for jack detection
In cx_probe(), the return value of snd_hda_jack_detect_enable_callback() is ignored. This function returns a pointer, and if it fails (e.g., due to memory allocation failure), it returns an error pointer which must be checked using IS_ERR().
If the registration fails, the driver continues to probe, but the jack detection callback will not be registered. This can lead to a kernel crash later when the driver attempts to handle jack events or accesses the uninitialized structure.
Check the return value using IS_ERR() and propagate the error via PTR_ERR() to the probe caller.
Weakness: CWE-476
Which versions are affected by CVE-2026-53291?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-53291?
Apply the vendor's patch.
Is CVE-2026-53291 being exploited?
There is no known exploitation of CVE-2026-53291 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-53291, DEBIAN-CVE-2026-53291, GHSA-7qh4-cc67-w444, ROOT-OS-UBUNTU-2204-CVE-2026-53291, ROOT-OS-UBUNTU-2404-CVE-2026-53291, UBUNTU-CVE-2026-53291.