GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-53242 (GCVE-0-2026-53242)

Vulnerability from cvelistv5 – Published: 2026-06-25 08:39 – Updated: 2026-09-02 12:49
VLAI
Title
ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams
Summary
In the Linux kernel, the following vulnerability has been resolved: ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams snd_pcm_drain() uses init_waitqueue_entry which does not clear entry.prev/next, and add_wait_queue with a conditional remove_wait_queue that is skipped when to_check is no longer in the group after concurrent UNLINK. The orphaned wait entry remains on the unlinked substream sleep queue. On the next drain iteration, add_wait_queue adds the entry to a new queue while still linked on the old one, corrupting both lists. A subsequent wake_up dereferences NULL at the func pointer (mapped from the spinlock at offset 0 of the misinterpreted wait_queue_head_t), causing a kernel panic. Replace init_waitqueue_entry/add_wait_queue/conditional remove_wait_queue with init_wait_entry/prepare_to_wait/ finish_wait. init_wait_entry clears prev/next via INIT_LIST_HEAD on each iteration and sets autoremove_wake_function which auto-removes the entry on wake-up. finish_wait safely handles both the already-removed and still-queued cases.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 9baee36e8c5443411c4629afabafaff8a46a23fd , < cac5bf3500ee6422cf64e0df0b5daeecfed42917 (git)
Affected: f2cb2e0d27fb925c73a78f0ce7d6dbf68d3747c1 , < 06eca2235a3fd281dddf25b0a97772b25b5bb573 (git)
Affected: fc71f888994569f87d5bee20b1ac6c9c1e3a7a79 , < d842f26a167e77a36f3ed333b9fa99d36ef99fe6 (git)
Affected: 629cf09464cf98670996ea5c191dc9743e6f3f00 , < d68b621bb5a48051932f1017a6e1bc9b18f854d0 (git)
Affected: ae8f8d30d334bad5b1b3cdb1eb8a0b771f55e432 , < b053fcd8912f06c30f932f5b8ec41c72de474695 (git)
Affected: 4a758e9a1f5ed722f83c4dd35f867fe811553bcb , < cd98837db15f323463b8df07282ac723bd5c3fed (git)
Affected: 9b1dbd69ba6f8f8c69bc7b77c2ce3b9c6ed05ba6 , < 7c71a9522555ff137a9ca36b15d759ca04d84788 (git)
Affected: 9b1dbd69ba6f8f8c69bc7b77c2ce3b9c6ed05ba6 , < 88fe2e3658726cb21ff2dcf9770bf672f9b9d31b (git)
Affected: c2f64e05a0587a83ec42dbd6b7a7ded79b2ff694 (git)
Affected: 5.10.253 , < 5.10.259 (semver)
Affected: 6.1.167 , < 6.1.176 (semver)
Affected: 6.6.130 , < 6.6.143 (semver)
Affected: 6.12.78 , < 6.12.94 (semver)
Affected: 6.18.19 , < 6.18.36 (semver)
Affected: 6.19.9 , < 6.20 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 7.0
Unaffected: 0 , < 7.0 (semver)
Unaffected: 5.10.259 , ≤ 5.10.* (semver)
Unaffected: 6.1.176 , ≤ 6.1.* (semver)
Unaffected: 6.6.143 , ≤ 6.6.* (semver)
Unaffected: 6.12.94 , ≤ 6.12.* (semver)
Unaffected: 6.18.36 , ≤ 6.18.* (semver)
Unaffected: 7.0.13 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "sound/core/pcm_native.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "cac5bf3500ee6422cf64e0df0b5daeecfed42917",
              "status": "affected",
              "version": "9baee36e8c5443411c4629afabafaff8a46a23fd",
              "versionType": "git"
            },
            {
              "lessThan": "06eca2235a3fd281dddf25b0a97772b25b5bb573",
              "status": "affected",
              "version": "f2cb2e0d27fb925c73a78f0ce7d6dbf68d3747c1",
              "versionType": "git"
            },
            {
              "lessThan": "d842f26a167e77a36f3ed333b9fa99d36ef99fe6",
              "status": "affected",
              "version": "fc71f888994569f87d5bee20b1ac6c9c1e3a7a79",
              "versionType": "git"
            },
            {
              "lessThan": "d68b621bb5a48051932f1017a6e1bc9b18f854d0",
              "status": "affected",
              "version": "629cf09464cf98670996ea5c191dc9743e6f3f00",
              "versionType": "git"
            },
            {
              "lessThan": "b053fcd8912f06c30f932f5b8ec41c72de474695",
              "status": "affected",
              "version": "ae8f8d30d334bad5b1b3cdb1eb8a0b771f55e432",
              "versionType": "git"
            },
            {
              "lessThan": "cd98837db15f323463b8df07282ac723bd5c3fed",
              "status": "affected",
              "version": "4a758e9a1f5ed722f83c4dd35f867fe811553bcb",
              "versionType": "git"
            },
            {
              "lessThan": "7c71a9522555ff137a9ca36b15d759ca04d84788",
              "status": "affected",
              "version": "9b1dbd69ba6f8f8c69bc7b77c2ce3b9c6ed05ba6",
              "versionType": "git"
            },
            {
              "lessThan": "88fe2e3658726cb21ff2dcf9770bf672f9b9d31b",
              "status": "affected",
              "version": "9b1dbd69ba6f8f8c69bc7b77c2ce3b9c6ed05ba6",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c2f64e05a0587a83ec42dbd6b7a7ded79b2ff694",
              "versionType": "git"
            },
            {
              "lessThan": "5.10.259",
              "status": "affected",
              "version": "5.10.253",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.176",
              "status": "affected",
              "version": "6.1.167",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.143",
              "status": "affected",
              "version": "6.6.130",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.94",
              "status": "affected",
              "version": "6.12.78",
              "versionType": "semver"
            },
            {
              "lessThan": "6.18.36",
              "status": "affected",
              "version": "6.18.19",
              "versionType": "semver"
            },
            {
              "lessThan": "6.20",
              "status": "affected",
              "version": "6.19.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "sound/core/pcm_native.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "7.0"
            },
            {
              "lessThan": "7.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.259",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.176",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.143",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.94",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.36",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.259",
                  "versionStartIncluding": "5.10.253",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.176",
                  "versionStartIncluding": "6.1.167",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.143",
                  "versionStartIncluding": "6.6.130",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.94",
                  "versionStartIncluding": "6.12.78",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.36",
                  "versionStartIncluding": "6.18.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.13",
                  "versionStartIncluding": "7.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "7.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.19.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams\n\nsnd_pcm_drain() uses init_waitqueue_entry which does not clear\nentry.prev/next, and add_wait_queue with a conditional\nremove_wait_queue that is skipped when to_check is no longer\nin the group after concurrent UNLINK.  The orphaned wait entry\nremains on the unlinked substream sleep queue.  On the next\ndrain iteration, add_wait_queue adds the entry to a new queue\nwhile still linked on the old one, corrupting both lists.  A\nsubsequent wake_up dereferences NULL at the func pointer\n(mapped from the spinlock at offset 0 of the misinterpreted\nwait_queue_head_t), causing a kernel panic.\n\nReplace init_waitqueue_entry/add_wait_queue/conditional\nremove_wait_queue with init_wait_entry/prepare_to_wait/\nfinish_wait.  init_wait_entry clears prev/next via\nINIT_LIST_HEAD on each iteration and sets\nautoremove_wake_function which auto-removes the entry on\nwake-up.  finish_wait safely handles both the already-removed\nand still-queued cases."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable code is reached from local userspace through ALSA PCM character-device ioctls such as SNDRV_PCM_IOCTL_LINK, SNDRV_PCM_IOCTL_UNLINK, and SNDRV_PCM_IOCTL_DRAIN. It is not reachable by remote network packets or adjacent/physical protocols.\nAC:L - The bug is a race, but the attacker can control both sides by using multiple PCM file descriptors/threads to link streams, block in drain, and concurrently unlink. No condition outside attacker control is required once suitable PCM devices are accessible.\nPR:L - No kernel capability check gates the vulnerable ioctl path, but the attacker needs local access to open ALSA PCM device nodes. That corresponds to a basic unprivileged local user with device access, not real root/admin privileges.\nUI:N - Exploitation is driven entirely by the attacker\u0027s own ioctl calls on opened PCM file descriptors. No victim user action is required.\nS:U - The vulnerability is in the kernel ALSA subsystem and affects kernel resources under the same security authority. It is not a VM escape, IOMMU bypass, or other cross-scope boundary violation.\nC:H - The documented failure is a panic, but the primitive is kernel wait-queue list corruption with an orphaned stack wait entry and cross-queue linkage under attacker-controlled timing. Under the higher-severity rule, this memory corruption is treated as potentially usable for kernel memory disclosure.\nI:H - The bug corrupts kernel wait-queue list pointers and can leave stale wait entries reachable by later wakeups. Although the observed path dereferences a NULL function pointer, this is kernel memory corruption plausibly usable for control-flow or privilege-impacting writes, so integrity is High.\nA:H - A subsequent wake_up can dereference a NULL/misinterpreted wait-queue function pointer and panic the kernel. This is a reliable high availability impact."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T12:49:37.764Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/cac5bf3500ee6422cf64e0df0b5daeecfed42917"
        },
        {
          "url": "https://git.kernel.org/stable/c/06eca2235a3fd281dddf25b0a97772b25b5bb573"
        },
        {
          "url": "https://git.kernel.org/stable/c/d842f26a167e77a36f3ed333b9fa99d36ef99fe6"
        },
        {
          "url": "https://git.kernel.org/stable/c/d68b621bb5a48051932f1017a6e1bc9b18f854d0"
        },
        {
          "url": "https://git.kernel.org/stable/c/b053fcd8912f06c30f932f5b8ec41c72de474695"
        },
        {
          "url": "https://git.kernel.org/stable/c/cd98837db15f323463b8df07282ac723bd5c3fed"
        },
        {
          "url": "https://git.kernel.org/stable/c/7c71a9522555ff137a9ca36b15d759ca04d84788"
        },
        {
          "url": "https://git.kernel.org/stable/c/88fe2e3658726cb21ff2dcf9770bf672f9b9d31b"
        }
      ],
      "title": "ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-53242",
    "datePublished": "2026-06-25T08:39:37.129Z",
    "dateReserved": "2026-06-09T07:44:35.393Z",
    "dateUpdated": "2026-09-02T12:49:37.764Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-53242",
      "date": "2026-09-15",
      "epss": "0.00129",
      "percentile": "0.02922"
    },
    "microsoft_vex": {
      "current_release_date": "2026-06-28T01:46:06.000Z",
      "cve": "CVE-2026-53242",
      "id": "msrc_CVE-2026-53242",
      "initial_release_date": "2026-06-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-53242.json",
      "version": "2"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-53242\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-06-25T09:16:42.140\",\"lastModified\":\"2026-09-02T13:18:01.617\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams\\n\\nsnd_pcm_drain() uses init_waitqueue_entry which does not clear\\nentry.prev/next, and add_wait_queue with a conditional\\nremove_wait_queue that is skipped when to_check is no longer\\nin the group after concurrent UNLINK.  The orphaned wait entry\\nremains on the unlinked substream sleep queue.  On the next\\ndrain iteration, add_wait_queue adds the entry to a new queue\\nwhile still linked on the old one, corrupting both lists.  A\\nsubsequent wake_up dereferences NULL at the func pointer\\n(mapped from the spinlock at offset 0 of the misinterpreted\\nwait_queue_head_t), causing a kernel panic.\\n\\nReplace init_waitqueue_entry/add_wait_queue/conditional\\nremove_wait_queue with init_wait_entry/prepare_to_wait/\\nfinish_wait.  init_wait_entry clears prev/next via\\nINIT_LIST_HEAD on each iteration and sets\\nautoremove_wake_function which auto-removes the entry on\\nwake-up.  finish_wait safely handles both the already-removed\\nand still-queued cases.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"sound/core/pcm_native.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"9baee36e8c5443411c4629afabafaff8a46a23fd\",\"lessThan\":\"cac5bf3500ee6422cf64e0df0b5daeecfed42917\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f2cb2e0d27fb925c73a78f0ce7d6dbf68d3747c1\",\"lessThan\":\"06eca2235a3fd281dddf25b0a97772b25b5bb573\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fc71f888994569f87d5bee20b1ac6c9c1e3a7a79\",\"lessThan\":\"d842f26a167e77a36f3ed333b9fa99d36ef99fe6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"629cf09464cf98670996ea5c191dc9743e6f3f00\",\"lessThan\":\"d68b621bb5a48051932f1017a6e1bc9b18f854d0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ae8f8d30d334bad5b1b3cdb1eb8a0b771f55e432\",\"lessThan\":\"b053fcd8912f06c30f932f5b8ec41c72de474695\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4a758e9a1f5ed722f83c4dd35f867fe811553bcb\",\"lessThan\":\"cd98837db15f323463b8df07282ac723bd5c3fed\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9b1dbd69ba6f8f8c69bc7b77c2ce3b9c6ed05ba6\",\"lessThan\":\"7c71a9522555ff137a9ca36b15d759ca04d84788\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9b1dbd69ba6f8f8c69bc7b77c2ce3b9c6ed05ba6\",\"lessThan\":\"88fe2e3658726cb21ff2dcf9770bf672f9b9d31b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c2f64e05a0587a83ec42dbd6b7a7ded79b2ff694\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.10.253\",\"lessThan\":\"5.10.259\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.1.167\",\"lessThan\":\"6.1.176\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.6.130\",\"lessThan\":\"6.6.143\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.12.78\",\"lessThan\":\"6.12.94\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.18.19\",\"lessThan\":\"6.18.36\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.19.9\",\"lessThan\":\"6.20\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"sound/core/pcm_native.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"7.0\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"7.0\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.259\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.176\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.143\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.94\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.36\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.13\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.10.253\",\"versionEndExcluding\":\"5.10.259\",\"matchCriteriaId\":\"5541328A-E6C3-4874-90F7-CDBC4AF38856\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.167\",\"versionEndExcluding\":\"6.1.176\",\"matchCriteriaId\":\"EA4D47D7-0677-4EA5-A70C-E66CDE321414\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.130\",\"versionEndExcluding\":\"6.6.143\",\"matchCriteriaId\":\"14572CC6-714F-49EE-BF85-5324A97BD777\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.12.78\",\"versionEndExcluding\":\"6.12.94\",\"matchCriteriaId\":\"7B79AD59-8ADE-4FF6-B9C7-0F3980FD5EA2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.18.19\",\"versionEndExcluding\":\"6.18.36\",\"matchCriteriaId\":\"DD0F2D3D-C8E6-441E-AB70-2144D9DECB30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19.9\",\"versionEndExcluding\":\"7.0\",\"matchCriteriaId\":\"BE96E756-5E4A-4D6E-8524-669CCEEA6D95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.1\",\"versionEndExcluding\":\"7.0.13\",\"matchCriteriaId\":\"FB18BE65-0CA0-4494-A61C-30A84098C809\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF897730-3F1E-47A2-8B07-22535202C487\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"02259FDA-961B-47BC-AE7F-93D7EC6E90C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"58A9FEFF-C040-420D-8F0A-BFDAAA1DF258\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D2315C0-D46F-4F85-9754-F9E5E11374A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"512EE3A8-A590-4501-9A94-5D4B268D6138\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1EF7059-E670-45F4-B422-54C40FA86390\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D38F0BF-A728-4133-A358-D44A2F7EE6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC732D08-5F7B-46D9-B154-E60C7F4F0A97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5910A9D-F60A-409A-B486-FE66BFEBA9B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"81DFF19E-9CF8-49C6-8C36-1E4038622933\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"B0E8FC71-3952-444C-83E9-718DBBBEC615\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/06eca2235a3fd281dddf25b0a97772b25b5bb573\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/7c71a9522555ff137a9ca36b15d759ca04d84788\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/88fe2e3658726cb21ff2dcf9770bf672f9b9d31b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b053fcd8912f06c30f932f5b8ec41c72de474695\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cac5bf3500ee6422cf64e0df0b5daeecfed42917\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cd98837db15f323463b8df07282ac723bd5c3fed\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d68b621bb5a48051932f1017a6e1bc9b18f854d0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d842f26a167e77a36f3ed333b9fa99d36ef99fe6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-05T14:32:56+00:00",
      "cve": "CVE-2026-53242",
      "id": "CVE-2026-53242",
      "initial_release_date": "2026-06-25T00:00:00+00:00",
      "product_status:known_affected": "184",
      "product_status:known_not_affected": "90",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53242.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-10T02:38:25Z",
      "cve": "CVE-2026-53242",
      "id": "CVE-2026-53242",
      "initial_release_date": "2026-06-26T02:08:56Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "538",
      "product_status:known_not_affected": "128",
      "product_status:recommended": "273",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-53242",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-53242.json",
      "version": "11"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.