Linux Kernel SOF IPC Pipeline Trigger Vulnerability

CVE-2026-80581

What is CVE-2026-80581?

A vulnerability within the Linux kernel's SOF (Sound Open Firmware) component relates to the handling of IPC (Inter-Process Communication) timeouts during pipeline triggers. In scenarios where the firmware state has crashed, the kernel is required to continue processing state changes to reset its internal state. This is crucial for ensuring the digital signal processor (DSP) can initialize correctly upon reboot. Moreover, when an IPC timeout occurs—rooted in system scheduling issues—despite the firmware having received and processed the message, the blocking may prevent proper response handling. Addressing this, the recommended approach is to proceed with setting the pipeline state to ensure system stability and functionality.

References