CVE-2026-80525

CVE-2026-80525 affects the Linux kernel ASoC SOF ipc4-topology component. The ipc_config_data buffer for copier widgets is built once during ipc_prepare and cached for reuse. On suspend/resume , host and link DMA streams are re-allocated with potentially different stream tags, but the widget list...

EUVD-2026-66591

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipcconfigdata buffer for copier widgets is built once during ipcprepare called from sofpcmsetupconnectedwidgets and cached for reuse. For host copiers...

CVE-2026-80525 ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipcconfigdata buffer for copier widgets is built once during ipcprepare called from sofpcmsetupconnectedwidgets and cached for reuse. For host copiers...

PT-2026-82197

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC SOF ipc4-pcm component where IPC errors during pipeline state changes were not handled correctly. If the firmware state crashed or an IPC timeout occurred, th...

PT-2026-82141

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC SOF ipc4-topology component where the ipc config data buffer for copier widgets is cached and not refreshed during suspend/resume cycles. While the underlying...

CVE-2026-80581: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out. If the firmware has crashed the kernel still needs t...

CVE-2026-80525: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipcconfigdata buffer for copier widgets is built once during ipcprepare called from sofpcmsetupconnectedwidgets and cached for reuse. For host copiers...

Linux Distros Unpatched Vulnerability : CVE-2026-80525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipcconfigdata buffer for copier widgets is built once during ipcprepare called from...

Linux Distros Unpatched Vulnerability : CVE-2026-80581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IP...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: mailbox: mtk-adsp: fixed a UAF use-after-free during device teardown. When the SOF audio driver fails to initialize e.g., due to a firmware boot timeout, its devices release the sndsofdev object that the mailbox client...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: SOF: ipc3-control: Fixed a heap overflow in bytesext put/get The ipccontroldata buffer is allocated using kzallocmaxsize, where maxsize covers the entire struct sofipcctrldata, including its flexible array payload...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Validates the notification payload size. Validates the length of the MODULENOTIFICATION payload before reading bytes/channel data in control update handling...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: topology: fixed a memory leak in sndsofloadtopology When the topology filename contains “dummy” and tplgcnt is 0, the function directly returns -EINVAL without freeing the tplgfiles allocated by kcalloc at line 2497...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: SOF: ipc3-control: Fixed the issue where TOCTOU was used in bytesput and bytesget. In sofipc3bytesput, the size used for the memcpy is derived from the old data-size that already exists in the buffer, rather than the siz...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Validates the size in sndsofupdatecontrol. In sndsofupdatecontrol, the value of cdata-numelems provided by the firmware is checked against localcdata-data-size, but never against the actual allocation siz...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Fixed the issue with TOCTOU in sofipc4bytesput. In sofipc4bytesput, the copy size is derived from the old data-size field in the buffer, rather than from the size field of the incoming new data from...

CVE-2026-74332

A flaw was found in the Linux kernel's ASoC Advanced Linux Sound Architecture System on Chip AMD ACP SoundWire SDW SOF Sound Open Firmware driver. The createsdwdailinks function, responsible for iterating through DAI Digital Audio Interface links, does not properly bound its iteration. This...

CVE-2026-72304

A flaw was found in the Advanced Linux Sound Architecture ALSA System on Chip ASoC Sound Open Firmware SOF ipc4-control component of the Linux kernel. This Time-of-check to time-of-use TOCTOU vulnerability occurs in the sofipc4bytesput function, where the copy size is incorrectly derived from old...

CVE-2026-72302

A flaw was found in the Linux kernel, specifically within the ASoC Sound Open Firmware SOF component. An integer overflow vulnerability exists in the sofipc3controlupdate function when calculating an expected size based on firmware-provided data on 32-bit systems. This flaw can lead to memory...

CVE-2026-72301

A flaw was found in the Linux kernel's Sound Open Firmware SOF IPC3 control module. This vulnerability, a Time-of-check to Time-of-use TOCTOU issue, arises from incorrect size handling during memory copy operations in the bytesput and bytesget functions. A local attacker could exploit this to cau...