CVE Database›Document archive›CVE-2026-80743

CVE-2026-80743

kernel: ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 3, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture System on Chip (ASoC) xilinx formatter_pcm component. This vulnerability arises when interrupt request (IRQ) handlers attempt to access driver data before it has been fully initialized during device setup. An interrupt occurring at a precise moment can cause the handler to receive an invalid reference (a null pointer), leading to a system crash and a Denial of Service (DoS).

Statement

Red Hat has evaluated this vulnerability as having a Moderate impact because triggering the flaw is limited to a local denial of service via a kernel crash, without risk of privilege escalation or information leakage. Exploitation requires interaction with specific Xilinx audio hardware during interrupt handling. Furthermore, Red Hat Enterprise Linux does not compile or ship the affected Xilinx ASoC audio formatter driver, meaning standard Red Hat installations are not vulnerable.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference