CVE-2026-43443

A flaw was found in the Advanced Linux Sound Architecture (ALSA) System on Chip (ASoC) AMD Audio CoProcessor (ACP) machine common driver within the Linux kernel. The acp_card_rt5682_init() and acp_card_rt5682s_init() functions failed to validate the return values from clock acquisition calls. This oversight could lead to the dereferencing of invalid pointers by clock core functions, resulting in a kernel crash and a Denial of Service (DoS) for the system.

A Moderate flaw was found in the Advanced Linux Sound Architecture (ALSA) AMD Audio CoProcessor (ACP) machine common driver in the Linux kernel. This vulnerability, affecting Red Hat Enterprise Linux 9 and Red Hat In-Vehicle OS 2, could allow a local attacker to trigger a kernel crash by dereferencing invalid pointers during clock acquisition, leading to a system Denial of Service. Exploitation requires a system with the affected AMD audio hardware and the corresponding kernel module loaded.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, if the AMD Audio CoProcessor is not required, the snd_soc_amd_acp_mach_common kernel module can be prevented from loading. Create a file named /etc/modprobe.d/blacklist-snd_soc_amd_acp_mach_common.conf with the content blacklist snd_soc_amd_acp_mach_common. After saving the file, regenerate the initramfs and reboot the system for the changes to take effect using dracut -f -v followed by reboot. This action may disable audio functionality on systems that rely on the AMD Audio CoProcessor.