Log in Start free

Vulnerability · Published Jun 22, 2026 · Assigned by VulnCheck

CVE-2026-56109ALSA Library < 1.2.16.1 Double-Free via parse_def() in conf.c

Medium 6.8

In plain English

A medium-severity double free in alsa-lib from alsa-project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.1%top 96.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12alsa-libno fix listedDEBIAN-CVE-2026-56109
Debian:13alsa-libno fix listedDEBIAN-CVE-2026-56109
Debian:14alsa-lib1.2.16.1-1DEBIAN-CVE-2026-56109
Ubuntu:22.04:LTSalsa-lib1.2.6.1-1ubuntu1.2UBUNTU-CVE-2026-56109
Ubuntu:22.04:LTSalsa-lib1.2.6.1-1ubuntu1.2USN-8538-1
Ubuntu:24.04:LTSalsa-lib1.2.11-1ubuntu0.3USN-8538-1
Ubuntu:24.04:LTSalsa-lib1.2.11-1ubuntu0.3UBUNTU-CVE-2026-56109
Ubuntu:25.10alsa-libno fix listedUBUNTU-CVE-2026-56109
Ubuntu:26.04:LTSalsa-lib1.2.15.3-1ubuntu1.1USN-8538-1
Ubuntu:26.04:LTSalsa-lib1.2.15.3-1ubuntu1.1UBUNTU-CVE-2026-56109

Affected products (as reported)

VendorProductVersions
alsa-project alsa-lib 0 – before 1.2.16.1

Weakness: CWE-415 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

References