CVE-2026-93187

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ASoC SOF ipc4-topology component where the system fails to report errors when the number of input or output formats is zero. Specifically, the functions sof ipc4 widget setup comp src() and sof ipc4 widget setup comp asrc() print an error and jump to a cleanup label, but because the ret variable remains 0 from a previous successful sof ipc4 get audio fmt() call, the functions incorrectly return success. This prevents the caller from detecting that the widget setup failed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.