In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: use managed regmap_field allocations The regmap_field objects… (CVE-2026-53065)
A resource leak vulnerability in the Linux kernel's ASoC sti driver was resolved by switching to managed regmap_field allocations. The issue involved regmap_field objects allocated during player initialization that were never freed, potentially leaking resources if the driver was removed. This vulnerability has been addressed by using devm_regmap_field_alloc() to tie the allocation lifetime to the device lifetime.
AI Analysis
Technical Summary
The Linux kernel ASoC sti driver previously allocated regmap_field objects at player initialization without freeing them upon driver removal, causing resource leaks. The fix involved changing to devm_regmap_field_alloc(), which manages the lifetime of these allocations automatically, preventing leaks when the device is removed.
Potential Impact
The vulnerability causes resource leaks (memory or other kernel resources) when the driver is removed, which could degrade system stability or availability. There is no impact on confidentiality or integrity. The CVSS score is 5.5 (medium severity) with an attack vector limited to local access and requiring low privileges.
Mitigation Recommendations
A fix is available and has been applied in the Linux kernel by switching to managed regmap_field allocations using devm_regmap_field_alloc(). Users should update to a kernel version that includes this fix. Since this is a kernel-level resource management issue, applying the official kernel patch or updating the kernel is the recommended remediation.
In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: use managed regmap_field allocations The regmap_field objects… (CVE-2026-53065)
Description
A resource leak vulnerability in the Linux kernel's ASoC sti driver was resolved by switching to managed regmap_field allocations. The issue involved regmap_field objects allocated during player initialization that were never freed, potentially leaking resources if the driver was removed. This vulnerability has been addressed by using devm_regmap_field_alloc() to tie the allocation lifetime to the device lifetime.
CVSS v3.1
Score 5.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel ASoC sti driver previously allocated regmap_field objects at player initialization without freeing them upon driver removal, causing resource leaks. The fix involved changing to devm_regmap_field_alloc(), which manages the lifetime of these allocations automatically, preventing leaks when the device is removed.
Potential Impact
The vulnerability causes resource leaks (memory or other kernel resources) when the driver is removed, which could degrade system stability or availability. There is no impact on confidentiality or integrity. The CVSS score is 5.5 (medium severity) with an attack vector limited to local access and requiring low privileges.
Mitigation Recommendations
A fix is available and has been applied in the Linux kernel by switching to managed regmap_field allocations using devm_regmap_field_alloc(). Users should update to a kernel version that includes this fix. Since this is a kernel-level resource management issue, applying the official kernel patch or updating the kernel is the recommended remediation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-gq3q-5vrm-rgm7
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-53065"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a5fcf481010f89cc2152a0a
Added to database: 07/21/2026, 19:58:00 UTC
Last enriched: 09/15/2026, 06:36:05 UTC
Last updated: 09/15/2026, 06:36:05 UTC
Views: 24
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.