Riskcovery

CVE-2026-43204

ASoC: qcom: q6asm: drop DSP responses for closed data streams

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
Oct 30, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: qcom: q6asm: drop DSP responses for closed data streams

'Commit a354f030dbce ("ASoC: qcom: q6asm: handle the responses after closing")' attempted to ignore DSP responses arriving after a stream had been closed.

However, those responses were still handled, causing lockups.

Fix this by unconditionally dropping all DSP responses associated with closed data streams.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 68fd8480bb7baaf361e983f75d8571f25e017c67 to before 750b468d8e0ba0ba1774a0da55b950dc23ffda67Affected
  • 68fd8480bb7baaf361e983f75d8571f25e017c67 to before 414396c42ef20d2d0c9213adaf4dfa59490ca077Affected
  • 68fd8480bb7baaf361e983f75d8571f25e017c67 to before c0b69245263ffa3db6f1be6e068528578fde635bAffected
  • 68fd8480bb7baaf361e983f75d8571f25e017c67 to before 3a409a64b2d61430c63cbb15d51681f13b8b0acdAffected
  • 68fd8480bb7baaf361e983f75d8571f25e017c67 to before 3249251eac6081d5169ba09f2d9cca66ab0cab0dAffected
  • 68fd8480bb7baaf361e983f75d8571f25e017c67 to before 8a066a81ee0c1b6cdbd81393536c3b2d19ccef25Affected
LinuxLinux
  • 4.18Affected
  • before 4.18Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.57 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.