CVE-2026-43204
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-05-06
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6asm: drop DSP responses for closed data streams 'Commit a354f030dbce ("ASoC: qcom: q6asm: handle the responses after closing")' attempted to ignore DSP responses arriving after a stream had been closed. However, those responses were still handled, causing lockups. Fix this by unconditionally dropping all DSP responses associated with closed data streams.
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 68fd8480bb7baaf361e983f75d8571f25e017c67 < 750b468d8e0ba0ba1774a0da55b950dc23ffda67 |
| Linux | Linux | 68fd8480bb7baaf361e983f75d8571f25e017c67 < 414396c42ef20d2d0c9213adaf4dfa59490ca077 |
| Linux | Linux | 68fd8480bb7baaf361e983f75d8571f25e017c67 < c0b69245263ffa3db6f1be6e068528578fde635b |
| Linux | Linux | 68fd8480bb7baaf361e983f75d8571f25e017c67 < 3a409a64b2d61430c63cbb15d51681f13b8b0acd |
| Linux | Linux | 68fd8480bb7baaf361e983f75d8571f25e017c67 < 3249251eac6081d5169ba09f2d9cca66ab0cab0d |
| Linux | Linux | 68fd8480bb7baaf361e983f75d8571f25e017c67 < 8a066a81ee0c1b6cdbd81393536c3b2d19ccef25 |
| Linux | Linux | 4.18 |
| linux | linux_kernel | 4.18 – 6.19.6 |