CVE-2026-72260

CVE-2026-72260 (Linux kernel, ASoC MT8192) : The vulnerability arises in the MT8192 AFE probe where runtime PM is enabled during regmap cache reinitialization and pm_runtime_get_sync() is called without validating its return value. If runtime resume fails, the probe continues, potentially leaving...

CVE-2026-72259 ASoC: mediatek: mt8192: Release reserved memory on cleanup

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Release reserved memory on cleanup The MT8192 AFE probe calls ofreservedmemdeviceinit and falls back to preallocated buffers when no reserved memory region is available. When the reserved memory assignment...

CVE-2026-72259

In the Linux kernel ASoC: mediatek mt8192 driver, reserved memory assigned during MT8192 AFE probe was not released on success. The issue is fixed by registering a devm cleanup action so the reserved-memory assignment is released on probe failure or driver unbind. This mode highlights the specifi...

EUVD-2026-59158

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Release reserved memory on cleanup The MT8192 AFE probe calls ofreservedmemdeviceinit and falls back to preallocated buffers when no reserved memory region is available. When the reserved memory assignment...

CVE-2026-72259 ASoC: mediatek: mt8192: Release reserved memory on cleanup

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Release reserved memory on cleanup The MT8192 AFE probe calls ofreservedmemdeviceinit and falls back to preallocated buffers when no reserved memory region is available. When the reserved memory assignment...

CVE-2026-72258 ASoC: mediatek: mt8183: Release reserved memory on cleanup

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8183: Release reserved memory on cleanup The MT8183 AFE probe can assign reserved memory with ofreservedmemdeviceinit, but the assignment is never released on driver removal or later probe failures. Register a...

EUVD-2026-59157

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8183: Release reserved memory on cleanup The MT8183 AFE probe can assign reserved memory with ofreservedmemdeviceinit, but the assignment is never released on driver removal or later probe failures. Register a...

CVE-2026-72258 ASoC: mediatek: mt8183: Release reserved memory on cleanup

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8183: Release reserved memory on cleanup The MT8183 AFE probe can assign reserved memory with ofreservedmemdeviceinit, but the assignment is never released on driver removal or later probe failures. Register a...

CVE-2026-72258

CVE-2026-72258 concerns the Linux kernel ASoC: mediatek mt8183 driver. The issue is that the MT8183 AFE probe can assign reserved memory via of_reserved_mem_device_init(), but the reservation is not released when the driver is removed or on subsequent probe failures. The flaw is resolved by regis...

CVE-2026-72257 ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm: fix NULL pointer dereference in graphcallback When q6apmfreefragments is called it frees rxdata.buf/txdata.buf and sets them to NULL under graph-lock. A late DSP buffer-done response can race with this:...

CVE-2026-72257

CVE-2026-72257 affects the Linux kernel ASoC qcom stack (q6apm). The root cause is a potential NULL pointer dereference in graph_callback when a late DSP buffer-done response races with q6apm_free_fragments() which frees and NULLs rx/tx buffers under graph->lock. The code path can dereference ...

CVE-2026-72257 ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm: fix NULL pointer dereference in graphcallback When q6apmfreefragments is called it frees rxdata.buf/txdata.buf and sets them to NULL under graph-lock. A late DSP buffer-done response can race with this:...

CVE-2026-72303: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Validate notification payload size Validate MODULENOTIFICATION payload length before reading bytes/channel data in control update handling...

Linux Distros Unpatched Vulnerability : CVE-2026-74291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: topology: Check PCM and DAI name strings before use Topology objects store several PCM and DAI names in fixed-size UAPI arrays. Other topology parser path...

PT-2026-72727

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA System on Chip ASoC topology parser where PCM and DAI name strings stored in fixed-size UAPI arrays are not properly validated. While other parser paths use...

PT-2026-72491

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC SOF ipc4-control component where the system fails to validate the MODULE NOTIFICATION payload length before reading bytes or channel data during control updat...

PT-2026-72603

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC SDCA component where the ge put enum double function fails to validate the user-supplied enumeration index item0 before passing it to snd soc enum item to val...

PT-2026-72768

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC amd acp-sdw-sof component where the create sdw dailinks function iterates through sof dais until it encounters an entry with the initialised flag cleared...

PT-2026-72730

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ASound Open Source ASoC meson AIU component, the HDMI and internal codec mux put callbacks fail to validate written enum values before passing them to the snd soc enum item to val...

PT-2026-72451

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the snd sof load topology function within the ASOC SOF topology component. When the topology filename contains the string "dummy" and the tplg cnt variable is 0,...