一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月18日

CVE-2026-93187 – In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topol

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: ipc4-topology: Return error for invalid number of formats

When the number of input or output formats is zero,
sof_ipc4_widget_setup_comp_src() and sof_ipc4_widget_setup_comp_asrc()
print an error and jump to the cleanup label. At that point ‘ret’ is
still 0, because the earlier sof_ipc4_get_audio_fmt() call succeeded, so
the function returns success and the caller never finds out that the
widget setup actually failed.

Set ret to -EINVAL before the goto so the error gets reported.