CVE-2026-56109
published 2026-06-22CVE-2026-56109: The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to…
PriorityP429medium6.8CVSS 3.1
AVLACLPRNUINSUCNILAH
EPSS
0.14%
3.2th percentile
The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| alsa-project | alsa-lib | < 1.2.16.1 | 1.2.16.1 |
| alsa-project | alsa-lib | — | — |
| ubuntu | alsa-lib | — | — |
CVSS provenance
nvdv3.16.8MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
nvdv4.07.0HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
alsa-project alsa-lib prior 1.2.16.1 src/conf.c parse_def double free
vuldb·2026-06-22·CVSS 6.8
CVE-2026-56109 [MEDIUM] alsa-project alsa-lib prior 1.2.16.1 src/conf.c parse_def double free
A vulnerability identified as problematic has been detected in alsa-project alsa-lib. Impacted is the function parse_def of the file src/conf.c. The manipulation leads to double free.
This vulnerability is listed as CVE-2026-56109. The attack must be carried out locally. There is no available exploit.
You should upgrade the affected component.
GHSA
The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously
ghsa_unreviewed·2026-06-22
CVE-2026-56109 [HIGH] CWE-415 The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously
The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.
Ubuntu
alsa-lib vulnerability
vendor_ubuntu·2026-07-14
CVE-2026-56109 alsa-lib vulnerability
Title: alsa-lib vulnerability
Summary: alsa-lib could be made to crash or run programs as your login if it opened
a specially crafted file.
It was discovered that alsa-lib incorrectly handled certain ALSA
configuration text. An attacker could use this issue to cause alsa-lib to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption
vendor_redhat·2026-06-22·CVSS 6.8
CVE-2026-56109 [MEDIUM] CWE-476 alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption
alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption
The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.
A flaw was found in the ALSA (Advanced Linux Sound Architecture) library. This double-free vulnerability, located in the `parse_def()` function, allows a local attacker to corrupt memory by providing specially crafted ALSA config
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-56109 alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption [fedora-all]
bugzilla·2026-08-18·CVSS 6.8
CVE-2026-56109 [MEDIUM] CVE-2026-56109 alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption [fedora-all]
CVE-2026-56109 alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write o
Bugzilla
CVE-2026-56109 alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption
bugzilla·2026-06-22·CVSS 6.8
CVE-2026-56109 [MEDIUM] CVE-2026-56109 alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption
CVE-2026-56109 alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption
The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.
https://github.com/alsa-project/alsa-lib/commit/536dd6f8affdf5197c12a63a71c92a70b2833cc0https://github.com/alsa-project/alsa-lib/releases/tag/v1.2.16.1https://lore.kernel.org/alsa-devel/CAGt8pqBU0p2voB+qHxWGcNJrKHAcBhAyHUUBPLBN-Yj_SiV6MQ@mail.gmail.com/https://www.vulncheck.com/advisories/alsa-library-double-free-via-parse-def-in-conf-c
2026-06-22
Published