CVE-2026-72445 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: clear opened when stream enable fails On enable, subs->opened is set before the service_interval is validated; an invalid interval jumps to the response label without clearing it, so the substream is wedged at -EBUSY until a disable or disconnect. Clear subs->opened on the enable error path.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/3c7af07943b2718087ae791cad450af5cf646d90
https://git.kernel.org/stable/c/53c23d56b46b1ae51574d92110895086aead7ad7
https://git.kernel.org/stable/c/ec6fb1ecada8ddfc3d0e1728e4792d16ae55dcdb

History

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: clear opened when stream enable fails On enable, subs->opened is set before the service_interval is validated; an invalid interval jumps to the response label without clearing it, so the substream is wedged at -EBUSY until a disable or disconnect. Clear subs->opened on the enable error path.
Title		ALSA: usb-audio: qcom: clear opened when stream enable fails
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/3c7af07943b2718087ae791cad450af5cf646d90 https://git.kernel.org/stable/c/53c23d56b46b1ae51574d92110895086aead7ad7 https://git.kernel.org/stable/c/ec6fb1ecada8ddfc3d0e1728e4792d16ae55dcdb

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:56:55.855Z

Updated: 2026-08-15T05:56:55.855Z

Reserved: 2026-08-09T03:40:39.930Z

Link: CVE-2026-72445

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:22:18.403

Modified: 2026-08-15T06:22:18.403

Link: CVE-2026-72445

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72445", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.930Z", "datePublished": "2026-08-15T05:56:55.855Z", "dateUpdated": "2026-08-15T05:56:55.855Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T05:56:55.855Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: qcom: clear opened when stream enable fails\n\nOn enable, subs->opened is set before the service_interval is validated;\nan invalid interval jumps to the response label without clearing it, so\nthe substream is wedged at -EBUSY until a disable or disconnect.\n\nClear subs->opened on the enable error path."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/usb/qcom/qc_audio_offload.c"], "versions": [{"version": "326bbc348298ab0946c5560defe024a5f6ef28bb", "lessThan": "53c23d56b46b1ae51574d92110895086aead7ad7", "status": "affected", "versionType": "git"}, {"version": "326bbc348298ab0946c5560defe024a5f6ef28bb", "lessThan": "ec6fb1ecada8ddfc3d0e1728e4792d16ae55dcdb", "status": "affected", "versionType": "git"}, {"version": "326bbc348298ab0946c5560defe024a5f6ef28bb", "lessThan": "3c7af07943b2718087ae791cad450af5cf646d90", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/usb/qcom/qc_audio_offload.c"], "versions": [{"version": "6.16", "status": "affected"}, {"version": "0", "lessThan": "6.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.2-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/53c23d56b46b1ae51574d92110895086aead7ad7"}, {"url": "https://git.kernel.org/stable/c/ec6fb1ecada8ddfc3d0e1728e4792d16ae55dcdb"}, {"url": "https://git.kernel.org/stable/c/3c7af07943b2718087ae791cad450af5cf646d90"}], "title": "ALSA: usb-audio: qcom: clear opened when stream enable fails", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["sound/usb/qcom/qc_audio_offload.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "53c23d56b46b1ae51574d92110895086aead7ad7", "status": "affected", "version": "326bbc348298ab0946c5560defe024a5f6ef28bb", "versionType": "git"}, {"lessThan": "ec6fb1ecada8ddfc3d0e1728e4792d16ae55dcdb", "status": "affected", "version": "326bbc348298ab0946c5560defe024a5f6ef28bb", "versionType": "git"}, {"lessThan": "3c7af07943b2718087ae791cad450af5cf646d90", "status": "affected", "version": "326bbc348298ab0946c5560defe024a5f6ef28bb", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["sound/usb/qcom/qc_audio_offload.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.16"}, {"lessThan": "6.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: qcom: clear opened when stream enable fails\n\nOn enable, subs->opened is set before the service_interval is validated;\nan invalid interval jumps to the response label without clearing it, so\nthe substream is wedged at -EBUSY until a disable or disconnect.\n\nClear subs->opened on the enable error path."}], "id": "CVE-2026-72445", "lastModified": "2026-08-15T06:22:18.403", "metrics": {}, "published": "2026-08-15T06:22:18.403", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3c7af07943b2718087ae791cad450af5cf646d90"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/53c23d56b46b1ae51574d92110895086aead7ad7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ec6fb1ecada8ddfc3d0e1728e4792d16ae55dcdb"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}