The vulnerability of the sound/soc/intel/avs component in Linux operating systems allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the sound/soc/intel/avs component in Linux operating systems is related to the dereferencing of a pointer with an expired reference count. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the snd_usbmidi_free() function in the sound/usb/midi.c module allows for exploitation by attackers, causing a service failure. This vulnerability exposes USB audio devices supported by Linux operating systems.

The vulnerability of the sndusbmidifree function in the sound/usb/midi.c module, which supports USB audio devices in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the add_widget_node() function in the sound/hda/hdac_sysfs.c module of the Linux kernel’s audio subsystem allows a hacker to cause a system failure.

The vulnerability of the addwidgetnode function in the sound/hda/hdacsysfs.c module of the Linux kernel’s audio subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the detect_stream_formats() function in the sound subsystem of the Linux operating system’s kernel, which allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the detectstreamformats function in the sound/firewire/dice/dice-extension.c module of the Linux kernel’s sound subsystem is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the `sof_get_control_data()` function in the `sound/soc/sof/ipc3-topology.c` file, which is part of the Linux operating system’s SoC audio support mechanism, allows a attacker to gain access to protected information or cause a service failure.

The vulnerability of the sofgetcontroldata function in the sound/soc/sof/ipc3-topology.c sound support module of the Linux SoC kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

The vulnerability of the `snd_dg00x_stream_init_duplex()` function in the sound subsystem of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the snddg00xstreaminitduplex function in the sound/firewire/digi00x/digi00x-stream.c module of the Linux kernel’s audio subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-23089 ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix use-after-free in sndusbmixerfree When sndusbcreatemixer fails, sndusbmixerfree frees mixer-idelems but the controls already added to the card still reference the freed memory. Later when sndcardregister runs...

SUSE CVE-2026-23006

In the Linux kernel, the following vulnerability has been resolved: ASoC: tlv320adcx140: fix null pointer The "sndsoccomponent" in "adcx140priv" was only used once but never set. It was only used for reaching "dev" which is already present in "adcx140priv"...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46863)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46863 advisory. - In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-lnl-match: a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003719 advisory. An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004141)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004141 advisory. An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card disconnection causes certain data structures...

CVE-2025-71081

In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync provider OF node when probing the platform device is currently only dropped if the setsync callback fails during DAI probe. Make sure to drop the referen...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002958 advisory. sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service race condition,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002783)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002783 advisory. Race condition in the sndpcmperiodelapsed function in sound/core/pcmlib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a denial o...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001752)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001752 advisory. A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the...

ROS-20260114-7325

A vulnerability in the sound/core/seq/oss/seqosssynth.c module of the Linux operating system kernel is related to synchronization errors when using a shared resource "Race Situation" when processing SysEx messages. Exploitation of the vulnerability could allow an attacker to cause a denial of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000194)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000194 advisory. An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card disconnection causes certain data structures...

Linux Distros Unpatched Vulnerability : CVE-2023-54308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ymfpci: Create card with device-managed snddevmcardnew sndcardymfpciremove was removed in commit c6e6bb5eab74 ALSA: ymfpci: Allocate resources with...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992956)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992956 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can be concurrent accesses to line6 midibuf from bo...

CVE-2023-54233

The CVE-2023-54233 issue affects the Linux kernel ASoC/SOF path, where IPC4 topologies containing an unsupported widget could leave the .module_info field unset, leading to a NULL dereference in sof_ipc4_route_setup() and a kernel Oops. A fix adds a guard to handle such cases. Connected sources c...