SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-80911

UNKNOWN · CVSS N/A EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-09-04 · Last synced 2026-09-19

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's ASoC (ALSA System on Chip) subsystem, specifically in the SOF (Sound Open Firmware) audio driver, where improper error handling during widget setup can lead to a double decrement of the use_count. This flaw could result in resource management issues, potentially causing instability or crashes in audio-related applications. Organizations utilizing Linux systems with SOF audio drivers should prioritize this fix to ensure system reliability and prevent potential exploitation.

CVE
CVE-2026-80911
Severity
UNKNOWN
CVSS
N/A
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() If either tplg_ops->dai_config or widget_kcontrol_setup fail during widget setup we would double decrement the use_count of the widget because the sof_widget_free_unlocked() would be called twice, similarly the core_put would be invoked twice as well. Since the use_count and core_put() is handled within the widget_free function we need to return without falling through the pipe_widget_free label. The fixes tag is picked to the last change around this part of the code which is adequately old enough for backporting purposes.