CVE-2026-46143

MediumCVSS 5.5/10Last modified Jun 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens

As prepare can be called mulitple times, this can result in multiple graph opens for playback path.

This will result in a memory leaks, fix this by adding a check before opening.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f6e1138d76cc684de3b851fc5cc5dac023a3ee89, < af9cc7c622e596455c5190e6ef53c5b40ea7a90d; >= b377d4df8fb00f861acf1a4d48de17b74cf535aa, < 3141d8b00cad6d3331953c79060ccc3a0262311b; >= be1fae62cf253a5b67526cee9fbc07689b97c125, < c91b7bcc70346d07f57ef03d1b9a338324e213de; >= be1fae62cf253a5b67526cee9fbc07689b97c125, < 7cab9f2ad51c858263da836baebad050a1bc7914; >= be1fae62cf253a5b67526cee9fbc07689b97c125, < b97493f0f42ab9d882a62466782e1900e481a9d6; >= be1fae62cf253a5b67526cee9fbc07689b97c125, < 69acc488aaf39d0ddf6c3cf0e47c1873d39919a2; ee211a845d122ca19dc6a65bbd88c085bee2a57c; >= 6.1.154, < 6.1.175; >= 6.6.37, < 6.6.140; >= 6.9.8, < 6.10
LinuxLinux6.10

References

Timeline

Published
May 28, 2026
Last modified
Jun 24, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-461445.5In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() Sashiko points CVE-2026-461457.8In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko points out that rx_hash_keCVE-2026-461465.5In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() ThCVE-2026-461475.5In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()CVE-2026-461485.5In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: control built-in cs manually The coreQSPI IPCVE-2026-461497.1In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_shoCVE-2026-46157.3A vulnerability was identified in SourceCodester Online Catering Reservation 1.0. Impacted is an unknown function of the file /search.php. SCVE-2026-461507.1In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_saCVE-2026-461515.5In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response usCVE-2026-461528.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rx_result ieee80211_iCVE-2026-461535.5In the Linux kernel, the following vulnerability has been resolved: 8021q: delete cleared egress QoS mappings vlan_dev_set_egress_priorityCVE-2026-461547.0In the Linux kernel, the following vulnerability has been resolved: sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters
CVE-2026-46143: Medium severity, CVSS 5.5 | Vulnix