ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.16 % · percentile 5 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() If either tplg_ops->dai_config or widget_kcontrol_setup fail during widget setup we would double decrement the use_count of the widget because the sof_widget_free_unlocked() would be called twice, similarly the core_put would be invoked twice as well. Since the use_count and core_put() is handled within the widget_free function we need to return without falling through the pipe_widget_free label. The fixes tag is picked to the last change around this part of the code which is adequately old enough for backporting purposes.
References
- https://git.kernel.org/stable/c/b270ed327380428581bbcbd85707f62e942428d7
- https://git.kernel.org/stable/c/c06995637f6a4667f2b540ac65315bfc8196a099
- https://git.kernel.org/stable/c/8cba53b862e1437257ec206d303ff942684284f1
- https://git.kernel.org/stable/c/d48691e70d4a9434b71039d4ed12bb0df4601acf
- https://git.kernel.org/stable/c/e780e4917d43683224812400fe3dc4816fceba75
European references
- ENISA EUVD · EUVD-2026-71614
- GCVE · GCVE-0-2026-80911
CERT-FR advisories
- CERTFR-2026-AVI-1232 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 3c124f09b7ff0434b076a8dec1ed446a6170b549 < b270ed327380428581bbcbd85707f62e942428d7 ; affected 31ed8da1c8e5e504710bb36863700e3389f8fc81 < c06995637f6a4667f2b540ac65315bfc8196a099 ; affected 31ed8da1c8e5e504710bb36863700e3389f8fc81 < 8cba53b862e1437257ec206d303ff942684284f1 ; affected 31ed8da1c8e5e504710bb36863700e3389f8fc81 < d48691e70d4a9434b71039d4ed12bb0df4601acf ; affected 31ed8da1c8e5e504710bb36863700e3389f8fc81 < e780e4917d43683224812400fe3dc4816fceba75 ; affected 6.6.13 < 6.6.153 |
| Linux · Linux | affected 6.7 ; unaffected 0 < 6.7 ; unaffected 6.6.153 ≤ 6.6.* ; unaffected 6.12.105 ≤ 6.12.* ; unaffected 6.18.46 ≤ 6.18.* ; unaffected 7.1.10 ≤ 7.1.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |