CVE-2026-80581
Received Received - Intake

SOF IPC4 PCM Pipeline State Change Handling Flaw

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out. If the firmware has crashed the kernel still needs to go through the state changes to reset its internal to be able to correctly work the next time the DSP is booted up. The case with IPC timeout is a bit more problematic, but it has been rootcaused to be the result of system scheduling blockage and the firmware did actually received and handled the message, but the reply handling got blocked by issues outside of the SOF stack. So far the best way to handle this is to continue with setting the state.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-80581
EUVD
EUVD-2026-66496

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the ASoC SOF IPC4-PCM component. When an IPC timeout occurs during pipeline state changes, the kernel may ignore errors and continue processing. This happens if the firmware is crashed or the IPC times out. The kernel resets its internal state to work correctly after the DSP boots again. For IPC timeouts, the issue stems from system scheduling problems where the firmware received the message but reply handling was blocked.

Detection Guidance

This vulnerability is specific to the Linux kernel's ASoC SOF IPC4-PCM component. Detection requires checking kernel logs for IPC timeout errors or firmware crash events related to the sound subsystem. Monitor dmesg or journalctl for ASoC/sof-related errors. No direct commands are provided in the context.

Impact Analysis

This vulnerability could lead to system instability or improper audio pipeline handling in Linux systems using the SOF stack. If the firmware crashes or IPC timeouts occur, audio functionality may be disrupted, requiring a reboot to restore normal operation.

Mitigation Strategies

Update the Linux kernel to the patched version that resolves this issue. Monitor kernel logs for IPC timeout or firmware crash events in the sound subsystem. Ensure proper system scheduling to avoid IPC reply handling delays.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80581. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart