{"id":"CVE-2026-43137","title":"ASoC: SOF: Intel: hda: Fix NULL pointer dereference","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Intel: hda: Fix NULL pointer dereference\n\nIf there's a mismatch between the DAI links in the machine driver and\nthe topology, it is possible that the playbac…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 0acb48dd31e39b617bb12ca546b4fecd6ccb2972 < a1d4f3d3c0dc86527da6a19f6901a6a48375500d","Linux >= 0acb48dd31e39b617bb12ca546b4fecd6ccb2972 < 10411f1f2c76be67103b1f95822ff629aa25e2aa","Linux >= 0acb48dd31e39b617bb12ca546b4fecd6ccb2972 < 42068f7dd42b559c4eeae645e1455ff36518866a","Linux >= 0acb48dd31e39b617bb12ca546b4fecd6ccb2972 < 7750d78b4014902bc0ac03d4bb30faa076a913ab","Linux >= 0acb48dd31e39b617bb12ca546b4fecd6ccb2972 < 16c589567a956d46a7c1363af3f64de3d420af20","Linux 5.16"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T15:29:25.350526Z"},"published":"2026-05-06","updated":"2026-11-06","sourceUpdated":"2026-11-06T15:32:33.194Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-43137","references":[{"url":"https://git.kernel.org/stable/c/a1d4f3d3c0dc86527da6a19f6901a6a48375500d"},{"url":"https://git.kernel.org/stable/c/10411f1f2c76be67103b1f95822ff629aa25e2aa"},{"url":"https://git.kernel.org/stable/c/42068f7dd42b559c4eeae645e1455ff36518866a"},{"url":"https://git.kernel.org/stable/c/7750d78b4014902bc0ac03d4bb30faa076a913ab"},{"url":"https://git.kernel.org/stable/c/16c589567a956d46a7c1363af3f64de3d420af20"}],"tags":["cve.org"],"epss":0.00127,"epssPercentile":0.02427,"ingestedAt":"2026-11-06T15:54:04.015Z","slug":"CVE-2026-43137","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Intel: hda: Fix NULL pointer dereference\n\nIf there's a mismatch between the DAI links in the machine driver and\nthe topology, it is possible that the playback/capture widget is not\nset, especially in the case of loopback capture for echo reference\nwhere we use the dummy DAI link. Return the error when the widget is not\nset to avoid a null pointer dereference like below when the topology is\nbroken.\n\nRIP: 0010:hda_dai_get_ops.isra.0+0x14/0xa0 [snd_sof_intel_hda_common]\n\n## Affected\n\n- `Linux >= 0acb48dd31e39b617bb12ca546b4fecd6ccb2972 < a1d4f3d3c0dc86527da6a19f6901a6a48375500d`\n- `Linux >= 0acb48dd31e39b617bb12ca546b4fecd6ccb2972 < 10411f1f2c76be67103b1f95822ff629aa25e2aa`\n- `Linux >= 0acb48dd31e39b617bb12ca546b4fecd6ccb2972 < 42068f7dd42b559c4eeae645e1455ff36518866a`\n- `Linux >= 0acb48dd31e39b617bb12ca546b4fecd6ccb2972 < 7750d78b4014902bc0ac03d4bb30faa076a913ab`\n- `Linux >= 0acb48dd31e39b617bb12ca546b4fecd6ccb2972 < 16c589567a956d46a7c1363af3f64de3d420af20`\n- `Linux 5.16`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}