CVE-2026-80743
kernel: ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 3, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's Advanced Linux Sound Architecture System on Chip (ASoC) xilinx formatter_pcm component. This vulnerability arises when interrupt request (IRQ) handlers attempt to access driver data before it has been fully initialized during device setup. An interrupt occurring at a precise moment can cause the handler to receive an invalid reference (a null pointer), leading to a system crash and a Denial of Service (DoS).
Statement
Red Hat has evaluated this vulnerability as having a Moderate impact because triggering the flaw is limited to a local denial of service via a kernel crash, without risk of privilege escalation or information leakage. Exploitation requires interaction with specific Xilinx audio hardware during interrupt handling. Furthermore, Red Hat Enterprise Linux does not compile or ship the affected Xilinx ASoC audio formatter driver, meaning standard Red Hat installations are not vulnerable.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference