CVE-2026-43204

MediumCVSS 5.5/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: qcom: q6asm: drop DSP responses for closed data streams

'Commit a354f030dbce ("ASoC: qcom: q6asm: handle the responses after closing")' attempted to ignore DSP responses arriving after a stream had been closed.

However, those responses were still handled, causing lockups.

Fix this by unconditionally dropping all DSP responses associated with closed data streams.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 68fd8480bb7baaf361e983f75d8571f25e017c67, < 750b468d8e0ba0ba1774a0da55b950dc23ffda67; >= 68fd8480bb7baaf361e983f75d8571f25e017c67, < 414396c42ef20d2d0c9213adaf4dfa59490ca077; >= 68fd8480bb7baaf361e983f75d8571f25e017c67, < c0b69245263ffa3db6f1be6e068528578fde635b; >= 68fd8480bb7baaf361e983f75d8571f25e017c67, < 3a409a64b2d61430c63cbb15d51681f13b8b0acd; >= 68fd8480bb7baaf361e983f75d8571f25e017c67, < 3249251eac6081d5169ba09f2d9cca66ab0cab0d; >= 68fd8480bb7baaf361e983f75d8571f25e017c67, < 8a066a81ee0c1b6cdbd81393536c3b2d19ccef25
LinuxLinux4.18

References

Timeline

Published
May 6, 2026
Last modified
Nov 11, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-432057.8In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate num_ifs to prevent out-of-bounds write The drivCVE-2026-432067.8In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() The kfd_evCVE-2026-432077.8In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix error handling in probe function Add mtk_mdp_unregCVE-2026-432089.8In the Linux kernel, the following vulnerability has been resolved: net: do not pass flow_id to set_rps_cpu() Blamed commit made the assumCVE-2026-432095.5In the Linux kernel, the following vulnerability has been resolved: minix: Add required sanity checking to minix_check_superblock() The fsCVE-2026-43219.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Raera - Ankara Web Design and Digital CVE-2026-432105.5In the Linux kernel, the following vulnerability has been resolved: tracing: ring-buffer: Fix to check event length before using Check theCVE-2026-432117.8In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_slot_trylock() error handling Commit a4e772898f8b ("PCI: CVE-2026-432127.8In the Linux kernel, the following vulnerability has been resolved: LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE The archCVE-2026-432137.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate sequence number of TX release report HardwaCVE-2026-432147.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() AddCVE-2026-432158.8In the Linux kernel, the following vulnerability has been resolved: cifs: Fix locking usage for tcon fields We used to use the cifs_tcp_se
CVE-2026-43204: Medium severity, CVSS 5.5 | Vulnix