CVE-2026-97414

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/09/2026
Last modified:
25/09/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend()<br /> <br /> mt8365_afe_suspend() allocates the register backup buffer with<br /> devm_kcalloc(), but does not check for allocation failure before using the<br /> returned pointer. This may lead to a NULL pointer dereference when<br /> accessing afe-&gt;reg_back_up[i].<br /> <br /> Add the missing NULL check and return -ENOMEM on allocation failure after<br /> disabling the main clock.<br /> <br /> Also propagate the return value of mt8365_afe_suspend() in<br /> mt8365_afe_dev_runtime_suspend() so that the suspended state is not updated<br /> when suspend fails.

Impact