In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: Intel: hda: Fix NULL pointer dereference
If there's a mismatch between the DAI links in the machine driver and
the topology, it is possible that the playback/capture widget is not
set, especially in the case of loopback capture for echo reference
where we use the dummy DAI link. Return the error when the widget is not
set to avoid a null pointer dereference like below when the topology is
broken.
RIP: 0010:hda_dai_get_ops.isra.0+0x14/0xa0 [snd_sof_intel_hda_common]
References
Configurations
Configuration 1 (hide)
|
History
23 May 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
12 May 2026, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux linux Kernel
Linux |
|
| CWE | CWE-476 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| References | () https://git.kernel.org/stable/c/10411f1f2c76be67103b1f95822ff629aa25e2aa - Patch | |
| References | () https://git.kernel.org/stable/c/16c589567a956d46a7c1363af3f64de3d420af20 - Patch | |
| References | () https://git.kernel.org/stable/c/42068f7dd42b559c4eeae645e1455ff36518866a - Patch | |
| References | () https://git.kernel.org/stable/c/7750d78b4014902bc0ac03d4bb30faa076a913ab - Patch |
06 May 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-06 12:16
Updated : 2026-05-23 12:17
NVD link : CVE-2026-43137
Mitre link : CVE-2026-43137
CVE.ORG link : CVE-2026-43137
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference