CVE-2026-46179: ASoC: SOF: Don't allow pointer operations on unconfigured streams
In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: Don't allow pointer operations on unconfigured streams
When reporting the pointer for a compressed stream we report the current I/O frame position by dividing the position by the number of channels multiplied by the number of container bytes. These values default to 0 and are only configured as part of setting the stream parameters so this allows a divide by zero to be configured. Validate that they are non zero, returning an error if not
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
When reporting the pointer for a compressed stream, validate that the number of channels and the number of container bytes are non-zero; if either is zero return an error to avoid divide-by-zero.
ASoC: SOF (Linux kernel) pointer reporting for compressed streams - channel count and container bytes = non-zero
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46179?
CVE-2026-46179 has been assigned a risk score of 27, indicating a critical vulnerability.
How do I fix CVE-2026-46179?
To fix CVE-2026-46179, update your Linux kernel to the latest patched version where the vulnerability has been resolved.
What is the primary issue caused by CVE-2026-46179?
CVE-2026-46179 allows pointer operations on unconfigured streams in the Linux kernel, leading to potential instability.
What software is affected by CVE-2026-46179?
CVE-2026-46179 affects the Linux kernel, specifically the ASoC subsystem.
What type of vulnerability is CVE-2026-46179 classified as?
CVE-2026-46179 is classified under the CWE category for Divide by Zero vulnerabilities.