CVE-2026-68346

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: validate and free ACPI mute object cs35l41getacpimutestate evaluates a DSM method to get the ACPI mute state and reads the first byte from the returned object. However, the returned ACPI object is owned by the...

PT-2026-69746

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA hda cs35l41 component, the cs35l41 get acpi mute state function evaluates a DSM method to retrieve the ACPI mute state. The function fails to free the returned ACPI object,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fixed a NULL pointer dereference in cs35l41getacpimutestate. The return value of the function acpievaluatedsm is dereferenced without checking for NULL. However, this check is usually performed for this...

CVE-2025-40098

CVE-2025-40098 affects the Linux kernel ALSA HDA driver for cs35l41. The issue is a NULL pointer dereference: acpi_evaluate_dsm() may return NULL and is dereferenced without a NULL check, risking a crash. The advisory notes this was fixed by adding a NULL check in cs35l41_get_acpi_mute_state() (a...