Not yet scoredPublished Dec 24, 2025

CVE-2023-54084ALSA: firewire-digi00x: prevent potential use after free

Updated under an hour ago (Oct 26, 2026, 2:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-digi00x: prevent potential use after free This code was supposed to return an error code if init_stream() failed, but it instead freed dg00x->rx_stream and returned success. This potentially leads to a use after free.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 9a08067ec318cbeaf0caa2d104cf677e723e02a3 before 5009aead17f060753428e249eb0246eb1c2f8b86; from 9a08067ec318cbeaf0caa2d104cf677e723e02a3 before 13c5fa1248bf06e95a25907c1be83948b8c44c50; from 9a08067ec318cbeaf0caa2d104cf677e723e02a3 before bbb5ac533ca6c4e2775a95388c9c0c610bb442b7; from 9a08067ec318cbeaf0caa2d104cf677e723e02a3 before ee1a221d947809c0308f27567c07a3ac93406057; from 9a08067ec318cbeaf0caa2d104cf677e723e02a3 before 67148395efa2c1fb20e98fca359b20e7a6c81fe4; from 9a08067ec318cbeaf0caa2d104cf677e723e02a3 before c0e72058d5e21982e61a29de6b098f7c1f0db498	CNA record

References

References

https://git.kernel.org/stable/c/5009aead17f060753428e249eb0246eb1c2f8b86
https://git.kernel.org/stable/c/13c5fa1248bf06e95a25907c1be83948b8c44c50
https://git.kernel.org/stable/c/bbb5ac533ca6c4e2775a95388c9c0c610bb442b7
https://git.kernel.org/stable/c/ee1a221d947809c0308f27567c07a3ac93406057
https://git.kernel.org/stable/c/67148395efa2c1fb20e98fca359b20e7a6c81fe4
https://git.kernel.org/stable/c/c0e72058d5e21982e61a29de6b098f7c1f0db498

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.