CVE-2026-53348

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the Linux kernel within the ASoC SDCA component. The function sdca dev unregister functions() iterates through SDCA function descriptors and calls sdca dev unregister() on each func dev without verifying if the pointer is NULL. This can occur if function registration fails partially or if device cleanup races with probe deferral, resulting in a kernel oops. This issue was observed on a Lenovo ThinkPad X1 Carbon G14 (Panther Lake) when the SOF audio driver probe failed due to missing firmware, triggering a crash during the cleanup of SoundWire devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.