CVE-2026-43137
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/05/2026
Last modified:
06/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ASoC: SOF: Intel: hda: Fix NULL pointer dereference<br />
<br />
If there&#39;s a mismatch between the DAI links in the machine driver and<br />
the topology, it is possible that the playback/capture widget is not<br />
set, especially in the case of loopback capture for echo reference<br />
where we use the dummy DAI link. Return the error when the widget is not<br />
set to avoid a null pointer dereference like below when the topology is<br />
broken.<br />
<br />
RIP: 0010:hda_dai_get_ops.isra.0+0x14/0xa0 [snd_sof_intel_hda_common]



