SB2026082752 - Improper Check or Handling of Exceptional Conditions in Linux kernel soc sof

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2026-80581)

CWE-ID: CWE-703 - Improper Check or Handling of Exceptional Conditions

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper handling of IPC timeout conditions in sof_ipc4_trigger_pipelines in sound/soc/sof/ipc4-pcm.c when processing pipeline trigger state changes. A local user can trigger pipeline state transitions that encounter an IPC timeout to cause a denial of service.

The issue occurs when reply handling is blocked by system scheduling blockage, which can leave internal pipeline state handling inconsistent until the DSP is booted again.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/17661c67b206612cb3ba65d5ae726cd2015d0a53
• https://git.kernel.org/stable/c/6b512a5330ef1a41db7aff4b80c4e952b8d52f17
• https://git.kernel.org/stable/c/f2435a46dfa1a5693cf2664afd022db66ee58121