CVE-2026-53350: ASoC: wm_adsp: Fix NULL dereference when removing firmware controls
In the Linux kernel, the following vulnerability has been resolved:
ASoC: wmadsp: Fix NULL dereference when removing firmware controls
In wmadspcontrolremove() check that the priv pointer is not NULL before attempting to cleanup what it points to.
When csdsp creates a control it calls wmadspcontroladdcb() so that wmadsp can create its own private control data. There are two cases where private data is not created:
1. The control is a SYSTEM control, so an ALSA control is not created.
2. The codec driver has registered a controladd() callback that hides the control, so wmadspcontroladd() is not called.
When csdspremove destroys its control list it calls wmadspcontrolremove() for each control. But wmadspcontrolremove() was attempting to cleanup the private data pointed to by csctl->priv without checking the pointer for NULL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In wm_adsp_control_remove(), add a NULL check for the priv pointer (cs_ctl->priv) before cleanup to fix the NULL dereference when removing firmware controls.
Linux kernel (ASoC wm_adsp) wm_adsp_control_remove() NULL-check for cs_ctl->priv = Check that the priv pointer is not NULL before attempting cleanup
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53350?
The severity of CVE-2026-53350 is rated at 27, indicating a moderate risk.
How do I fix CVE-2026-53350?
To fix CVE-2026-53350, ensure that the priv pointer is checked for NULL in the wm_adsp_control_remove() function before cleanup.
What systems are affected by CVE-2026-53350?
CVE-2026-53350 affects the Linux kernel, particularly the ASoC wm_adsp component.
What type of vulnerability is CVE-2026-53350?
CVE-2026-53350 is a NULL dereference vulnerability that occurs when removing firmware controls.
When was CVE-2026-53350 published?
CVE-2026-53350 was published on July 1, 2026.