CVE-2026-43204

CVE-2026-43204

Medium · published May 6, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: qcom: q6asm: drop DSP responses for closed data streams

'Commit a354f030dbce ("ASoC: qcom: q6asm: handle the responses

after closing")' attempted to ignore DSP responses arriving

after a stream had been closed.

However, those responses were still handled, causing lockups.

Fix this by unconditionally dropping all DSP responses associated with

closed data streams.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Published
2026-05-06T16:16Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 4.18, < 6.19.66.19.6
References (5)
EPSS history
Timeline
  • 06 MAY 11:28Z
    ASoC: qcom: q6asm: drop DSP responses for closed data streams
    cvelistv5