In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: sof-audio: Fix error path in sof widget setup unlocked()

If either tplg ops->dai config or widget kcontrol setup fail during widget setup we would double decrement the use count of the widget because the sof widget free unlocked() would be called twice, similarly the core put would be invoked twice as well.

Since the use count and core put() is handled within the widget free function we need to return without falling through the pipe widget free label.

The fixes tag is picked to the last change around this part of the code which is adequately old enough for backporting purposes.