Executive brief
A vulnerability was identified in the Linux kernel's audio subsystem (ASoC) that could lead to a system crash. The issue occurs when the system fails to properly handle memory allocation when naming certain audio components. A local user could potentially exploit this to cause a denial-of-service, impacting the availability of the system.
Technical details
A vulnerability classified as CWE-252 (Unchecked Return Value) exists in the Linux kernel's Sound Open Firmware (ASoC) SDCA driver. Specifically, the function 'find_sdca_entity_iot' in 'sound/soc/sdca/sdca_functions.c' uses 'devm_kasprintf' to allocate a string for an entity label but fails to verify if the allocation returned a NULL pointer. An attacker with local access could trigger a memory exhaustion condition or specific hardware configuration path that results in a NULL pointer dereference, causing a kernel oops or system crash (Denial of Service). The issue has been resolved by adding the necessary NULL checks and returning -ENOMEM upon failure.
Affected products
- Linux Linux Kernel 6.19 to 6.19.7, 7.0-rc1, 7.0-rc2
Timeline
- 2026-03-03: patched: Fix committed to mainline kernel tree
- 2026-03-25: disclosed: CVE published
- 2026-05-28: advisory: NVD analysis completed