CVE-2026-80911

CVE-2026-80911

published September 4, 2026

CVSS
—
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()

If either tplg_ops->dai_config or widget_kcontrol_setup fail during widget

setup we would double decrement the use_count of the widget because the

sof_widget_free_unlocked() would be called twice, similarly the core_put

would be invoked twice as well.

Since the use_count and core_put() is handled within the widget_free

function we need to return without falling through the pipe_widget_free

label.

The fixes tag is picked to the last change around this part of the code

which is adequately old enough for backporting purposes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Published
2026-09-04T22:18Z
References (5)
EPSS history
Timeline
  • 06 SEP 03:33Z
    EPSS moved — → 0%
    epss
  • 04 SEP 17:19Z
    ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()
    cvelistv5