Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-46179

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Don't allow pointer operations on unconfigured streams When reporting the pointer for a compressed stream we report the current I/O frame position by dividing the position by the number of channels multiplied by the number of container bytes. These values default to 0 and are only configured as part of setting the stream parameters so this allows a divide by zero to be configured. Validate that they are non zero, re
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:77f122f897a44fd35e2a1c01ff85fd1628c5384a1ae876d0cd568012a87a091c
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["sound/soc/sof/compress.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.1"},{"lessThan":"6.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.140","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.88","versionType":"semver"},{"lessThanO…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d3ac7f833135060ba1531b7410ff6011e1ac28e1d5808baf96baf5c4abf03799 · sha256:00746298bb886149… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/soc/sof/compress.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"76ff6bfc9a809571793f425ba99f6a759108dcf8","status":"affected","version":"c1a731c71359407eae4fd0a5fd675ef25a582764","versionType":"git"},{"lessThan":"327a64241f30c74b6f35537eb9e1fc6c3cbe060b","status":"affected","version":"c1a731c71359407eae4fd0a5fd675ef25a582764","versionType":"git"},{"lessThan":"98ed1383f597f8a45b6cb816bb20b96d46eeceda","status":"affected","version":"c1a731c71359407eae4fd…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d3ac7f833135060ba1531b7410ff6011e1ac28e1d5808baf96baf5c4abf03799 · sha256:00746298bb886149… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["sound/soc/sof/compress.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.1"},{"lessThan":"6.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.140","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.88","versionType":"semver"},{"lessThanO…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d3ac7f833135060ba1531b7410ff6011e1ac28e1d5808baf96baf5c4abf03799 · sha256:00746298bb886149… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/soc/sof/compress.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"76ff6bfc9a809571793f425ba99f6a759108dcf8","status":"affected","version":"c1a731c71359407eae4fd0a5fd675ef25a582764","versionType":"git"},{"lessThan":"327a64241f30c74b6f35537eb9e1fc6c3cbe060b","status":"affected","version":"c1a731c71359407eae4fd0a5fd675ef25a582764","versionType":"git"},{"lessThan":"98ed1383f597f8a45b6cb816bb20b96d46eeceda","status":"affected","version":"c1a731c71359407eae4fd…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d3ac7f833135060ba1531b7410ff6011e1ac28e1d5808baf96baf5c4abf03799 · sha256:00746298bb886149… · /containers/cna/affected/0

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/0f0c0c1397a42aacaacae828206ee1b921623952"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d3ac7f833135060ba1531b7410ff6011e1ac28e1d5808baf96baf5c4abf03799 · sha256:00746298bb886149… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/327a64241f30c74b6f35537eb9e1fc6c3cbe060b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d3ac7f833135060ba1531b7410ff6011e1ac28e1d5808baf96baf5c4abf03799 · sha256:00746298bb886149… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/4f42dd01f5217465f23a763e27b3984e114d0972"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d3ac7f833135060ba1531b7410ff6011e1ac28e1d5808baf96baf5c4abf03799 · sha256:00746298bb886149… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/76ff6bfc9a809571793f425ba99f6a759108dcf8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d3ac7f833135060ba1531b7410ff6011e1ac28e1d5808baf96baf5c4abf03799 · sha256:00746298bb886149… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/98ed1383f597f8a45b6cb816bb20b96d46eeceda"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d3ac7f833135060ba1531b7410ff6011e1ac28e1d5808baf96baf5c4abf03799 · sha256:00746298bb886149… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/c5b6285aae050ff1c3ea824ca3d88ac4be1e69c8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d3ac7f833135060ba1531b7410ff6011e1ac28e1d5808baf96baf5c4abf03799 · sha256:00746298bb886149… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer