CVE-2026-43478

A flaw was found in the Linux kernel's ASoC rt1011 codec component. An incorrect helper function used to retrieve the Digital Audio Power Management (DAPM) context in rt1011_recv_spk_mode_put() can lead to a null pointer dereference. This issue could allow a local attacker to cause a system crash, resulting in a denial of service (DoS).

This vulnerability is rated as a Low severity issue because exploitation requires local access and depends on the presence of physical Realtek rt1011 audio codec hardware. In typical enterprise and cloud deployments, this specialized sound hardware is neither present nor configured, substantially limiting real-world exposure. Furthermore, triggering the condition results solely in a kernel crash leading to a denial of service, with no potential for privilege escalation or confidentiality impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.