Riskcovery

CVE-2026-80581

ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout

State
Published
Severity
Not scored
Published
Aug 26, 2026
Updated
Oct 30, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout

Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out.

If the firmware has crashed the kernel still needs to go through the state changes to reset its internal to be able to correctly work the next time the DSP is booted up.

The case with IPC timeout is a bit more problematic, but it has been rootcaused to be the result of system scheduling blockage and the firmware did actually received and handled the message, but the reply handling got blocked by issues outside of the SOF stack. So far the best way to handle this is to continue with setting the state.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3cac6eebea9b4bc5f041e157e45c76e212ad6759 to before 4931c09d83877dc350106bae745321c3f295129bAffected
  • c40aad7c81e5fba34b70123ed7ce3397fa62a4d2 to before 96d51b8c5a909937d41f9c03495188d4190f877dAffected
  • c40aad7c81e5fba34b70123ed7ce3397fa62a4d2 to before f2435a46dfa1a5693cf2664afd022db66ee58121Affected
  • c40aad7c81e5fba34b70123ed7ce3397fa62a4d2 to before 6b512a5330ef1a41db7aff4b80c4e952b8d52f17Affected
  • c40aad7c81e5fba34b70123ed7ce3397fa62a4d2 to before 17661c67b206612cb3ba65d5ae726cd2015d0a53Affected
  • 6ee66295542f88e5179439f60053de792df3f90eAffected
  • d153e8b154f9746ac969c85a4e6474760453647cAffected
  • 6.6.23 to before 6.6.154Affected
  • 6.1.191 to before 6.2Affected
  • 6.7.11 to before 6.8Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.6.154 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.46 through 6.18.*Not affected
  • 7.1.10 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.