CVE-2026-98956

A flaw was found in the Linux kernel's ADAU1372 audio codec driver. The driver improperly utilizes non-sleepable operations to toggle power-down General Purpose Input/Output GPIO pins that can sleep, such as those connected through external bus controllers. A local user triggering audio power-sta...

CVE-2026-98744

A flaw was found in the Linux kernel's MAX98363 audio codec driver. A local user could trigger this vulnerability during audio stream configuration because internal stream parameters are left uninitialized in memory. This issue allows uninitialized values to be processed by the sound subsystem,...

CVE-2026-98743

A flaw was found in the Linux kernel's rt1017 SDCA audio codec driver. The driver fails to initialize stream configuration data before passing it to the sound subsystem, leaving configuration fields populated with uninitialized memory. A local user could exploit this flaw during audio stream...

CVE-2026-98263

A flaw was found in the Linux kernel's Realtek RT712 audio codec driver. A local user could exploit this flaw to cause a Denial of Service DoS or unexpected system behavior. The issue arises because audio stream configuration data is left uninitialized before being passed to the SoundWire...

CVE-2026-97579

A flaw was found in the Linux kernel's MediaTek video codec driver. An out-of-bounds write occurs during AV1 video decoding because tile information from the video stream is copied into fixed-size internal memory without proper bounds checking. A local user could exploit this flaw by submitting...

CVE-2026-80583

A flaw was found in the Linux kernel, specifically within the lpass-tx-macro audio codec driver. This vulnerability arises from the driver's incorrect handling of certain control values, where it uses an improper data type for accessing enumerated kernel controls. This error can lead to a system...

UBUNTU-CVE-2026-74295

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: hdachdmi: Validate written enum value hdachdmisetpinportmux uses the written enum value to index the texts array before calling sndsocdapmputenumdouble, which validates that the value is within the enum item range. ...

PT-2026-72730

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ASound Open Source ASoC meson AIU component, the HDMI and internal codec mux put callbacks fail to validate written enum values before passing them to the snd soc enum item to val...

CVE-2026-53350

In the Linux kernel, the following vulnerability has been resolved: ASoC: wmadsp: Fix NULL dereference when removing firmware controls In wmadspcontrolremove check that the priv pointer is not NULL before attempting to cleanup what it points to. When csdsp creates a control it calls...

CVE-2026-53350

In the Linux kernel, the following vulnerability has been resolved: ASoC: wmadsp: Fix NULL dereference when removing firmware controls In wmadspcontrolremove check that the priv pointer is not NULL before attempting to cleanup what it points to. When csdsp creates a control it calls...

PT-2026-72731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC codecs hdac hdmi component where the hdac hdmi set pin port mux function uses a written enum value to index the texts array before calling snd soc dapm put en...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the vdecmsgqueueinit function in the drivers/media/platform/mediatek/vcodec/vdecmsgqueue.c file of the Linux kernel-based multimedia device driver leads to unlimited resource allocation. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

EUVD-2022-55410

Malicious code in bioql PyPI...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2019-11135: TSX Asynchronous Abort condition bsc1139073. CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL...

PT-2025-28887

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak exists in the WCD9335 audio codec driver due to the failure to free regulator supplies in error paths and during unbind operations. The driver obtains and enables regulat...

CVE-2023-52736

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Do not unset preset when cleaning up codec Several functions that take part in codec's initialization and removal are re-used by ASoC codec drivers implementations. Drivers mimic the behavior of...

CVE-2016-10231: Undefined Security Weakness

An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel. Android ID: A-33966912. References: QC-CR1096799...

Google Android Qualcomm Sound Codec Driver Information Disclosure Vulnerability

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Google Android suffers from an information disclosure vulnerability. Attackers can use this vulnerability to obtain sensitive information and launch further attacks...

CVE-2017-0632

An information disclosure vulnerability in the Qualcomm sound codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions:...

PT-2017-10580

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description An information disclosure issue in the Qualcomm sound codec driver could allow a local malicious application to access data outside of its permission levels. This issue requires...