CVE-2026-80743
Received Received - Intake

Xilinx ASoC Formatter PCM Null Pointer Dereference

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers The irq handlers take a struct device pointer and call dev_get_drvdata() to obtain the driver data. However, the driver data is only set at the end of probe, after devm_request_irq(), so an interrupt taken in between causes the handlers to pass a NULL pointer to readl() and crash. Pass the private data directly as the devm_request_irq() argument instead of the device pointer, matching what the handlers expect.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-03
AI Q&A
2026-09-03
EPSS Evaluated
N/A
NVD
CVE-2026-80743
EUVD
EUVD-2026-70347

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability where interrupt handlers in the Xilinx ASoC formatter_pcm driver receive a NULL pointer. The driver data is set after interrupts are requested, so an interrupt occurring before this setup causes the handlers to crash when calling dev_get_drvdata() and readl().

Detection Guidance

This vulnerability is specific to the Linux kernel's ASoC xilinx formatter_pcm driver and may cause kernel crashes due to NULL pointer dereference in interrupt handlers. Detection requires checking kernel logs for crashes or kernel oops related to the xilinx audio driver.

Impact Analysis

This could cause system crashes or instability if the affected driver is used. Systems relying on audio functionality through Xilinx ASoC may experience kernel panics or unexpected reboots when interrupts occur during driver initialization.

Mitigation Strategies

Apply the kernel patch that passes private data directly to devm_request_irq() instead of using dev_get_drvdata(). Update to a kernel version containing the fix. If immediate patching is not possible, disable the xilinx formatter_pcm driver to prevent the issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80743. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart