CVE-2026-43204: ASoC: qcom: q6asm: drop DSP responses for closed data streams
In the Linux kernel, the following vulnerability has been resolved:
ASoC: qcom: q6asm: drop DSP responses for closed data streams
'Commit a354f030dbce ("ASoC: qcom: q6asm: handle the responses after closing")' attempted to ignore DSP responses arriving after a stream had been closed.
However, those responses were still handled, causing lockups.
Fix this by unconditionally dropping all DSP responses associated with closed data streams.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.19.6-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.2.12-1Fixed in 7.2.14-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.160 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.114 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.57 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.19.6 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch a354f030dbce
Event History
Frequently Asked Questions
What systems are exposed to this issue?
The issue affects Linux kernel systems using the Qualcomm ASoC q6asm audio component, including the listed Ubuntu kernel packages: linux-azure, linux-gcp, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, and linux-realtime.
What conditions are required to trigger the lockup?
A DSP response must arrive after its associated data stream has been closed. The affected handling still processes such late responses, which can cause a lockup.
What is the practical impact?
The documented impact is a system lockup, reflected by the availability-only impact in the supplied severity vector. No confidentiality or integrity impact is identified.
What should be done to remediate the issue?
Apply a kernel update that includes the fix to unconditionally drop DSP responses associated with closed data streams. The supplied references identify stable kernel commits containing the fix.