Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Don't allow pointer operations on unconfigured streams When reporting the pointer for a compressed stream we report the current I/O frame position by dividing the position by the number of channels multiplied by the number of container bytes. These values default to 0 and are only configured as part of setting the stream parameters so this allows a divide by zero to be configured. Validate that they are non zero, returning an error if not
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.1, < 6.1.175 |
References
- https://git.kernel.org/stable/c/0f0c0c1397a42aacaacae828206ee1b921623952Patch
- https://git.kernel.org/stable/c/327a64241f30c74b6f35537eb9e1fc6c3cbe060bPatch
- https://git.kernel.org/stable/c/4f42dd01f5217465f23a763e27b3984e114d0972Patch
- https://git.kernel.org/stable/c/76ff6bfc9a809571793f425ba99f6a759108dcf8Patch
- https://git.kernel.org/stable/c/98ed1383f597f8a45b6cb816bb20b96d46eecedaPatch
- https://git.kernel.org/stable/c/c5b6285aae050ff1c3ea824ca3d88ac4be1e69c8Patch
FAQ
What is CVE-2026-46179?
CVE-2026-46179 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Don't allow pointer operations on unconfigured streams When reporting the pointer for a compressed stream we report the...
How severe is CVE-2026-46179?
CVE-2026-46179 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-46179?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.