CVE-2026-43204

A flaw was found in the Linux kernel's ASoC Qualcomm (qcom) q6asm component. This vulnerability occurs when the system continues to process Digital Signal Processor (DSP) responses for data streams that have already been closed. An attacker could potentially exploit this by sending specific DSP responses, leading to system lockups and a Denial of Service (DoS).

This vulnerability is evaluated as having a Moderate severity impact by Red Hat because successful exploitation requires local unprivileged access on systems equipped with Qualcomm audio DSP hardware and results only in a system lockup and denial of service. Typical Red Hat Enterprise Linux server and enterprise workstation deployments do not utilize Qualcomm QDSP6 sound hardware, significantly limiting exposure. Deployments lacking this hardware or running on architectures without Qualcomm audio subsystems are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.