CVE-2026-97414

Not scored yetLast modified Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend()

mt8365_afe_suspend() allocates the register backup buffer with devm_kcalloc(), but does not check for allocation failure before using the returned pointer. This may lead to a NULL pointer dereference when accessing afe->reg_back_up[i].

Add the missing NULL check and return -ENOMEM on allocation failure after disabling the main clock.

Also propagate the return value of mt8365_afe_suspend() in mt8365_afe_dev_runtime_suspend() so that the suspended state is not updated when suspend fails.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 24, 2026
Last modified
Sep 25, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-974157.8In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF ROOT_CVE-2026-97416In the Linux kernel, the following vulnerability has been resolved: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_dataCVE-2026-974177.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() The tiCVE-2026-97418In the Linux kernel, the following vulnerability has been resolved: ALSA: es18xx: check control allocation before private data setup snd_eCVE-2026-97419In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace TheCVE-2026-97425.9When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" comCVE-2026-97420In the Linux kernel, the following vulnerability has been resolved: bpf: NUL-terminate replaced sysctl value When writing to sysctls, procCVE-2026-974217.8In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgCVE-2026-97422In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfd_smi_ev_enCVE-2026-97423In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access construct_regCVE-2026-97424In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irCVE-2026-97425In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer p
CVE-2026-97414: Unscored | Vulnix