CVE-2026-98940

The Linux kernel contains a vulnerability in the ASoC: qcom: lpass-cpu driver where the system incorrectly uses a DAI ID (a hardware port ID) as an index for the variant->dai_driver table. Because DAI IDs may be sparse, this mismatch can cause the code to write beyond the table boundaries when...

EUVD-2026-108912

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints The DAI ID is a hardware port ID and is not necessarily the index of the corresponding entry in variant-daidriver. When configuring a DAI with...

ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()

...

AZL-52455 CVE-2024-50103 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asocqcomlpasscpuplatformprobe A devmkzalloc in asocqcomlpasscpuplatformprobe could possibly return NULL pointer. NULL Pointer Dereference may be triggerred without addtional check. Add a NULL...

UBUNTU-CVE-2024-50103

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asocqcomlpasscpuplatformprobe A devmkzalloc in asocqcomlpasscpuplatformprobe could possibly return NULL pointer. NULL Pointer Dereference may be triggerred without addtional check. Add a NULL...

PT-2024-33936

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A NULL Pointer Dereference issue has been identified in the Linux kernel, specifically in the asoc qcom lpass cpu platform probe function. This issue arises when a devm kzalloc call returns a...