CVE-2026-80525: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipcconfigdata buffer for copier widgets is built once during ipcprepare called from sofpcmsetupconnectedwidgets and cached for reuse. For host copiers...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104547)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104547 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fslaudmix: Validate written enum values fslaudmixputmixclksrc and fslaudmixputoutsrc...

PT-2026-82199

Name of the Vulnerable Software and Affected Versions Linux Kernel ASoC affected versions not specified Description An issue exists in the lpass-tx-macro codec where the controls from "DEC0 MODE" to "DEC7 MODE" are enumerated, but the functions tx macro dec mode get and tx macro dec mode put...

Linux Distros Unpatched Vulnerability : CVE-2026-80583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses The DEC0 MODE to DEC7 MODE controls are enumerated, but txmacrodecmodeget and txmacrodecmodeput access...

PT-2026-82142

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC tas2562 component where the tas2562 volume control put function fails to validate control values written by userspace. This lack of validation allows the...

Linux Distros Unpatched Vulnerability : CVE-2026-80526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: tas2562: Validate values for volume writes tas2562volumecontrolput does not do any validation of the control value written by userspace, it uses it to loo...

PT-2026-82141

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC SOF ipc4-topology component where the ipc config data buffer for copier widgets is cached and not refreshed during suspend/resume cycles. While the underlying...

PT-2026-82197

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC SOF ipc4-pcm component where IPC errors during pipeline state changes were not handled correctly. If the firmware state crashed or an IPC timeout occurred, th...

CVE-2026-80526: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562volumecontrolput does not do any validation of the control value written by userspace, it uses it to look up a value in a fixed size array which can easily be overflowed and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104574)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104574 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210ahub: Validate written enum value tegraahubputvalueenum reads e-valuesitem0...

Linux Distros Unpatched Vulnerability : CVE-2026-80581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IP...

CVE-2026-80581: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out. If the firmware has crashed the kernel still needs t...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: SOF: ipc3-control: Fixed the issue where TOCTOU was used in bytesput and bytesget. In sofipc3bytesput, the size used for the memcpy is derived from the old data-size that already exists in the buffer, rather than the siz...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fixed an issue where accessing an array was done outside the bounds of the array for an enum type. Accessing enums using integers would result in accessing an array outside its bounds on platforms like...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192 – Release reserved memory during cleanup. The MT8192 AFE probe calls ofreservedmemdeviceinit, but it falls back to the preallocated buffers when no reserved memory region is available. However, when the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fixed an issue where access to the compander was allowed. The AUX interpolator does not have a compander; therefore, check this before accessing compander data. Without this check, an out-of-bounds access...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Fixed the issue with TOCTOU in sofipc4bytesput. In sofipc4bytesput, the copy size is derived from the old data-size field in the buffer, rather than from the size field of the incoming new data from...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wc938x: fixed an issue where accessing an array was done outside its bounds for an enum type. Accessing enums using integers resulted in accessing an array outside its bounds on platforms like aarch64, where...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: Codecs: va-macro: Fix for accessing an array out of bounds for an enum type. Accessing enums using integers would result in accessing an array out of bounds on platforms like aarch64, where sizeoflong is 8 compared to the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-legacy: Bound DAI link iteration The createsdwdailinks function iterates through socdais until it finds an entry that is initialized and cleared. However, socdais is allocated with exactly numends entries. If a...