CVE-2026-43478

MEDIUM

ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put

Title source: cna

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put The correct helper to use in rt1011_recv_spk_mode_put() to retrieve the DAPM context is snd_soc_component_to_dapm(), from kcontrol we will receive NULL pointer.

References (2)

Core 2

Core References

https://git.kernel.org/stable/c/b10b2b15b45923ff2807eeb034d91a39b0a3e690

https://git.kernel.org/stable/c/30e4b2290cc2a8d1b9ddb9dcb9c981df1f2a7399

Scores

CVSS v3 5.5

EPSS 0.0010

EPSS Percentile 1.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (9)

linux/Kernel 6.19.0 - 6.19.9linux

Linux/Linux < 6.19

Linux/Linux 5b35bb517f27fc2401ec3cfd8c02a127627a0188 - 30e4b2290cc2a8d1b9ddb9dcb9c981df1f2a7399

Linux/Linux 5b35bb517f27fc2401ec3cfd8c02a127627a0188 - b10b2b15b45923ff2807eeb034d91a39b0a3e690

Linux/Linux 6.19

Linux/Linux 6.19.9 - 6.19.*

Linux/Linux 7.0

linux/linux_kernel 7.0 rc1 (3 CPE variants)

linux/linux_kernel 6.19 - 6.19.9

Published May 13, 2026

Tracked Since May 13, 2026