CVE-2026-43204
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6asm: drop DSP responses for closed data streams 'Commit a354f030dbce ("ASoC: qcom: q6asm: handle the responses after closing")' attempted to ignore DSP responses arriving after a stream had been closed. However, those responses were still handled, causing lockups. Fix this by unconditionally dropping all DSP responses associated with closed data streams.
Severity
MEDIUM
CVSS score
5.5
(v3.1)
Vulnerability status
Modified
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-05-06 12:16:39.623000
Last modified
2026-10-30 13:18:47.700000
View original CVE JSON
{
"id": "CVE-2026-43204",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-05-06T12:16:39.623",
"lastModified": "2026-10-30T13:18:47.700",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: qcom: q6asm: drop DSP responses for closed data streams\n\n'Commit a354f030dbce (\"ASoC: qcom: q6asm: handle the responses\nafter closing\")' attempted to ignore DSP responses arriving\nafter a stream had been closed.\n\nHowever, those responses were still handled, causing lockups.\n\nFix this by unconditionally dropping all DSP responses associated with\nclosed data streams."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"sound/soc/qcom/qdsp6/q6asm.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "68fd8480bb7baaf361e983f75d8571f25e017c67",
"lessThan": "750b468d8e0ba0ba1774a0da55b950dc23ffda67",
"versionType": "git",
"status": "affected"
},
{
"version": "68fd8480bb7baaf361e983f75d8571f25e017c67",
"lessThan": "414396c42ef20d2d0c9213adaf4dfa59490ca077",
"versionType": "git",
"status": "affected"
},
{
"version": "68fd8480bb7baaf361e983f75d8571f25e017c67",
"lessThan": "c0b69245263ffa3db6f1be6e068528578fde635b",
"versionType": "git",
"status": "affected"
},
{
"version": "68fd8480bb7baaf361e983f75d8571f25e017c67",
"lessThan": "3a409a64b2d61430c63cbb15d51681f13b8b0acd",
"versionType": "git",
"status": "affected"
},
{
"version": "68fd8480bb7baaf361e983f75d8571f25e017c67",
"lessThan": "3249251eac6081d5169ba09f2d9cca66ab0cab0d",
"versionType": "git",
"status": "affected"
},
{
"version": "68fd8480bb7baaf361e983f75d8571f25e017c67",
"lessThan": "8a066a81ee0c1b6cdbd81393536c3b2d19ccef25",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"sound/soc/qcom/qdsp6/q6asm.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "4.18",
"status": "affected"
},
{
"version": "0",
"lessThan": "4.18",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.191",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.160",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.114",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.57",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.19.6",
"lessThanOrEqual": "6.19.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.0",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.18",
"versionEndExcluding": "6.19.6",
"matchCriteriaId": "3F171404-207A-46FA-9F81-038AD7546760"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/3249251eac6081d5169ba09f2d9cca66ab0cab0d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3a409a64b2d61430c63cbb15d51681f13b8b0acd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/414396c42ef20d2d0c9213adaf4dfa59490ca077",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/750b468d8e0ba0ba1774a0da55b950dc23ffda67",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/8a066a81ee0c1b6cdbd81393536c3b2d19ccef25",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c0b69245263ffa3db6f1be6e068528578fde635b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}