Riskcovery

CVE-2023-54233

ASoC: SOF: avoid a NULL dereference with unsupported widgets

State
Published
Severity
Not scored
Published
Dec 30, 2025
Updated
Oct 3, 2026
Reserved
Dec 30, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: avoid a NULL dereference with unsupported widgets

If an IPC4 topology contains an unsupported widget, its .module_info field won't be set, then sof_ipc4_route_setup() will cause a kernel Oops trying to dereference it. Add a check for such cases.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3acd527089463742a3dd95e274d53c2fdd834716 to before d42fe2721111138d7656d4f621f38c171979c8a0Affected
  • 3acd527089463742a3dd95e274d53c2fdd834716 to before 170818974e9732506195c6302743856cc8bdfd6fAffected
  • 3acd527089463742a3dd95e274d53c2fdd834716 to before e3720f92e0237921da537e47a0b24e27899203f8Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.1.189 through 6.1.*Not affected
  • 6.2.11 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.