CVE-2026-80911: ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-04 · updated 2026-09-04

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() If either tplg_ops->dai_config or widget_kcontrol_setup fail during widget setup we would double decrement the use_count of the widget because the sof_widget_free_unlocked() would be called twice, similarly the core_put would be invoked twice as well. Since the use_count and core_put() is handled within the widget_free function we need to return without falling through the pipe_widget_free label. The fixes tag is picked to the last change around this part of the code which is adequately old enough for backporting purposes.

Affected products

Linux kernel: from 6.6.13 before 6.6.153; 6.7 — fixed in 6.6.153, 7.2

How to fix

Upgrade to a fixed version: Linux kernel 6.6.153, 7.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-80911 or the next vulnerability affects your stack