CVE-2026-31587: ASoC: qcom: q6apm: move component registration to unmanaged version
ASoC: qcom: q6apm: move component registration to unmanaged version
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Configuration
Move q6apm component registration from the device-managed version to the unmanaged version so dynamically allocated DAI pointers are freed only after the component is removed.
ASoC qcom q6apm component registration allocation mode = unmanaged
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31587?
The CVE-2026-31587 vulnerability has a severity rating that requires assessment based on the specific environment and usage of the affected software.
How do I fix CVE-2026-31587?
To fix CVE-2026-31587, update the Linux snd_q6apm driver to the latest version where this vulnerability has been resolved.
What are the potential impacts of CVE-2026-31587?
CVE-2026-31587 may lead to instability or misuse of the dynamic component registration in the q6apm driver.
Is CVE-2026-31587 being actively exploited?
As of the last update, there have been no widespread reports of exploitation for CVE-2026-31587, but it is important to apply patches promptly.
What systems are affected by CVE-2026-31587?
CVE-2026-31587 affects systems using the Linux snd_q6apm (ASoC qcom q6apm driver) implementation.