CVE-2026-97414
Received Received - Intake

NULL Pointer Dereference in Linux Kernel ASoC mt8365-afe-pcm Driver

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() mt8365_afe_suspend() allocates the register backup buffer with devm_kcalloc(), but does not check for allocation failure before using the returned pointer. This may lead to a NULL pointer dereference when accessing afe->reg_back_up[i]. Add the missing NULL check and return -ENOMEM on allocation failure after disabling the main clock. Also propagate the return value of mt8365_afe_suspend() in mt8365_afe_dev_runtime_suspend() so that the suspended state is not updated when suspend fails.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-97414
EUVD
EUVD-2026-86027

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a NULL pointer dereference in the Linux kernel's ASoC subsystem for the Mediatek MT8365 audio frontend. The issue occurs in the mt8365_afe_suspend() function where memory allocation for a register backup buffer can fail. The function does not check if the allocation succeeded before using the pointer, which may lead to a crash when accessing the buffer.

Detection Guidance

This vulnerability is specific to the Linux kernel's ASoC subsystem for Mediatek MT8365 devices. Detection requires checking kernel logs for NULL pointer dereference errors during suspend operations or examining the mt8365-afe-pcm driver code for the described issue.

Impact Analysis

If exploited, this vulnerability could cause a system crash or instability when the affected audio subsystem attempts to suspend. Users may experience audio-related failures or unexpected system reboots during normal operation.

Mitigation Strategies

Update your Linux kernel to a patched version that includes the fix for CVE-2026-97414. The patch adds NULL checks in mt8365_afe_suspend() and propagates error codes properly. Check your distribution's security updates or kernel release notes for the fixed version.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97414. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart