CVE-2026-43137

ASoC: SOF: Intel: hda: Fix NULL pointer dereference

published May 6, 2026

CVSS
—
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda: Fix NULL pointer dereference

If there's a mismatch between the DAI links in the machine driver and

the topology, it is possible that the playback/capture widget is not

set, especially in the case of loopback capture for echo reference

where we use the dummy DAI link. Return the error when the widget is not

set to avoid a null pointer dereference like below when the topology is

broken.

RIP: 0010:hda_dai_get_ops.isra.0+0x14/0xa0 [snd_sof_intel_hda_common]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Published
2026-05-06T11:27Z
EPSS history
Timeline
  • 06 MAY 11:27Z
    ASoC: SOF: Intel: hda: Fix NULL pointer dereference
    cvelistv5