CVE-2026-80581ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out. If the firmware has crashed the kernel still needs to go through the state changes to reset its internal to be able to correctly work the next time the DSP is booted up. The case with IPC timeout is a bit more problematic, but it has been rootcaused to be the result of system scheduling blockage and the firmware did actually received and handled the message, but the reply handling got blocked by issues outside of the SOF stack. So far the best way to handle this is to continue with setting the state.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 27, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 3cac6eebea9b4bc5f041e157e45c76e212ad6759 before 4931c09d83877dc350106bae745321c3f295129b; from c40aad7c81e5fba34b70123ed7ce3397fa62a4d2 before f2435a46dfa1a5693cf2664afd022db66ee58121; from c40aad7c81e5fba34b70123ed7ce3397fa62a4d2 before 6b512a5330ef1a41db7aff4b80c4e952b8d52f17; from c40aad7c81e5fba34b70123ed7ce3397fa62a4d2 before 17661c67b206612cb3ba65d5ae726cd2015d0a53; d153e8b154f9746ac969c85a4e6474760453647c; from 6.6.23 before 6.6.154; from 6.7.11 before 6.8 | CNA record |
References
- https://git.kernel.org/stable/c/4931c09d83877dc350106bae745321c3f295129b
- https://git.kernel.org/stable/c/f2435a46dfa1a5693cf2664afd022db66ee58121
- https://git.kernel.org/stable/c/6b512a5330ef1a41db7aff4b80c4e952b8d52f17
- https://git.kernel.org/stable/c/17661c67b206612cb3ba65d5ae726cd2015d0a53
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.