Executive brief
A vulnerability in the Linux kernel's Qualcomm audio driver could allow a local user to cause a system lockup. The issue occurs when the system incorrectly processes audio data responses after a stream has already been closed. This can lead to a denial-of-service condition, impacting the availability of the affected device.
Technical details
A vulnerability in the Qualcomm Audio Stream Manager (q6asm) driver within the Linux kernel's ASoC (ALSA System on Chip) subsystem leads to system lockups. The root cause is the improper handling of Digital Signal Processor (DSP) responses that arrive after an audio data stream has been closed. While a previous commit attempted to address this, responses like ASM_DATA_CMD_WRITE_V2 were still being processed instead of being dropped. A local attacker can trigger this condition to cause a denial-of-service (kernel lockup). The fix involves unconditionally dropping all DSP responses associated with closed data streams in sound/soc/qcom/qdsp6/q6asm.c.
Affected products
- Linux Linux Kernel 4.18 to 6.19.6
Timeline
- 2026-01-02: other: Patch authored
- 2026-05-06: disclosed
- 2026-05-06: advisory