CVE-2026-43137
MediumSummary
A vulnerability related to NULL pointer dereference in the ASoC: SOF: Intel: hda module has been fixed in the Linux kernel. The issue occurs when there is a mismatch between the DAI links in the machine driver and the topology, potentially leading to the playback/capture widget not being set, especially in loopback scenarios.
Risk Assessment
This vulnerability may lead to issues with audio playback or recording, which can affect the functionality of audio-based systems within the organization.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and ensure proper functioning of audio components.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix NULL pointer dereference If there's a mismatch between the DAI links in the machine driver and the topology, it is possible that the playback/capture widget is not set, especially in the case of loopback