CVE-2026-43204

{"id": "CVE-2026-43204", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "68fd8480bb7baaf361e983f75d8571f25e017c67", "lessThan": "750b468d8e0ba0ba1774a0da55b950dc23ffda67", "versionType": "git"}, {"status": "affected", "version": "68fd8480bb7baaf361e983f75d8571f25e017c67", "lessThan": "414396c42ef20d2d0c9213adaf4dfa59490ca077", "versionType": "git"}, {"status": "affected", "version": "68fd8480bb7baaf361e983f75d8571f25e017c67", "lessThan": "c0b69245263ffa3db6f1be6e068528578fde635b", "versionType": "git"}, {"status": "affected", "version": "68fd8480bb7baaf361e983f75d8571f25e017c67", "lessThan": "3a409a64b2d61430c63cbb15d51681f13b8b0acd", "versionType": "git"}, {"status": "affected", "version": "68fd8480bb7baaf361e983f75d8571f25e017c67", "lessThan": "3249251eac6081d5169ba09f2d9cca66ab0cab0d", "versionType": "git"}, {"status": "affected", "version": "68fd8480bb7baaf361e983f75d8571f25e017c67", "lessThan": "8a066a81ee0c1b6cdbd81393536c3b2d19ccef25", "versionType": "git"}], "programFiles": ["sound/soc/qcom/qdsp6/q6asm.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.18"}, {"status": "unaffected", "version": "0", "lessThan": "4.18", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.191", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.160", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.114", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.57", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.6", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["sound/soc/qcom/qdsp6/q6asm.c"], "defaultStatus": "affected"}]}], "published": "2026-05-06T12:16:39.623", "references": [{"url": "https://git.kernel.org/stable/c/3249251eac6081d5169ba09f2d9cca66ab0cab0d", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/3a409a64b2d61430c63cbb15d51681f13b8b0acd", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/414396c42ef20d2d0c9213adaf4dfa59490ca077", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/750b468d8e0ba0ba1774a0da55b950dc23ffda67", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8a066a81ee0c1b6cdbd81393536c3b2d19ccef25", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c0b69245263ffa3db6f1be6e068528578fde635b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: qcom: q6asm: drop DSP responses for closed data streams\n\n'Commit a354f030dbce (\"ASoC: qcom: q6asm: handle the responses\nafter closing\")' attempted to ignore DSP responses arriving\nafter a stream had been closed.\n\nHowever, those responses were still handled, causing lockups.\n\nFix this by unconditionally dropping all DSP responses associated with\nclosed data streams."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nASoC: qcom: q6asm: descartar respuestas DSP para flujos de datos cerrados\n\nEl commit a354f030dbce (\u2019ASoC: qcom: q6asm: manejar las respuestas despu\u00e9s de cerrar\u2019) intent\u00f3 ignorar las respuestas DSP que llegaban despu\u00e9s de que un flujo se hab\u00eda cerrado.\n\nSin embargo, esas respuestas segu\u00edan siendo manejadas, causando bloqueos.\n\nEsto se soluciona descartando incondicionalmente todas las respuestas DSP asociadas con flujos de datos cerrados."}], "lastModified": "2026-11-11T20:10:00.273", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F171404-207A-46FA-9F81-038AD7546760", "versionEndExcluding": "6.19.6", "versionStartIncluding": "4.18"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}