CVE-2026-46179
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability has been identified in the Linux kernel that allows pointer operations on unconfigured streams. The issue arises from dividing the I/O frame position by values that default to 0, potentially leading to a divide by zero error.
Risk Assessment
This vulnerability could lead to system crashes or unexpected behavior of applications using unconfigured audio streams, impacting system stability and security.
Recommendation
It is recommended to update the Linux kernel to the latest version where this vulnerability has been patched to avoid potential issues related to divide by zero.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Don't allow pointer operations on unconfigured streams When reporting the pointer for a compressed stream we report the current I/O frame position by dividing the position by the number of channels multiplied by the number of container bytes. These values default to 0 and are only configured as part of setting the stream parameters so this allows a divide by zero to be configured. Validate that they are non zero, returning an error if not