5.5

CVE-2026-46143

ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens

In the Linux kernel, the following vulnerability has been resolved:

ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens

As prepare can be called mulitple times, this can result in multiple
graph opens for playback path.

This will result in a memory leaks, fix this by adding a check before
opening.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 6.1.154 < 6.1.175
Linux ≫ Linux Kernel Version >= 6.6.37 < 6.6.140
Linux ≫ Linux Kernel Version >= 6.9.8 < 6.10
Linux ≫ Linux Kernel Version >= 6.10.1 < 6.12.88
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.30
Linux ≫ Linux Kernel Version >= 6.19 < 7.0.7
Linux ≫ Linux Kernel Version6.10 Update-
Linux ≫ Linux Kernel Version6.10 Updaterc6
Linux ≫ Linux Kernel Version6.10 Updaterc7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.028
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/3141d8b00cad6d3331953c79060ccc3a0262311b
Patch
https://git.kernel.org/stable/c/c91b7bcc70346d07f57ef03d1b9a338324e213de
Patch
https://git.kernel.org/stable/c/7cab9f2ad51c858263da836baebad050a1bc7914
Patch
https://git.kernel.org/stable/c/b97493f0f42ab9d882a62466782e1900e481a9d6
Patch
https://git.kernel.org/stable/c/69acc488aaf39d0ddf6c3cf0e47c1873d39919a2
Patch
https://git.kernel.org/stable/c/af9cc7c622e596455c5190e6ef53c5b40ea7a90d
Patch