Riskcovery

CVE-2026-46179

ASoC: SOF: Don't allow pointer operations on unconfigured streams

State
Published
Severity
Not scored
Published
May 28, 2026
Updated
Jun 14, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Don't allow pointer operations on unconfigured streams

When reporting the pointer for a compressed stream we report the current I/O frame position by dividing the position by the number of channels multiplied by the number of container bytes. These values default to 0 and are only configured as part of setting the stream parameters so this allows a divide by zero to be configured. Validate that they are non zero, returning an error if not

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c1a731c71359407eae4fd0a5fd675ef25a582764 to before 76ff6bfc9a809571793f425ba99f6a759108dcf8Affected
  • c1a731c71359407eae4fd0a5fd675ef25a582764 to before 327a64241f30c74b6f35537eb9e1fc6c3cbe060bAffected
  • c1a731c71359407eae4fd0a5fd675ef25a582764 to before 98ed1383f597f8a45b6cb816bb20b96d46eecedaAffected
  • c1a731c71359407eae4fd0a5fd675ef25a582764 to before 0f0c0c1397a42aacaacae828206ee1b921623952Affected
  • c1a731c71359407eae4fd0a5fd675ef25a582764 to before 4f42dd01f5217465f23a763e27b3984e114d0972Affected
  • c1a731c71359407eae4fd0a5fd675ef25a582764 to before c5b6285aae050ff1c3ea824ca3d88ac4be1e69c8Affected
LinuxLinux
  • 6.1Affected
  • before 6.1Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.140 through 6.6.*Not affected
  • 6.12.88 through 6.12.*Not affected
  • 6.18.30 through 6.18.*Not affected
  • 7.0.7 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.