CVE-2026-80911

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()

If either tplg_ops->dai_config or widget_kcontrol_setup fail during widget

setup we would double decrement the use_count of the widget because the

sof_widget_free_unlocked() would be called twice, similarly the core_put

would be invoked twice as well.

Since the use_count and core_put() is handled within the widget_free

function we need to return without falling through the pipe_widget_free

label.

The fixes tag is picked to the last change around this part of the code

which is adequately old enough for backporting purposes.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References