CVE-2026-43137

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference can occur in the ASoC SOF Intel hda component. This happens when there is a mismatch between the DAI links in the machine driver and the topology, which may result in the playback or capture widget not being set. This is particularly relevant during loopback capture for echo reference using a dummy DAI link. The issue manifests in the hda dai get ops() function when the topology is broken.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.