Improper Resource Management in Linux Kernel Affecting Audio Widgets

CVE-2026-80911

What is CVE-2026-80911?

A resource management vulnerability has been identified within the Linux kernel specifically related to the audio subsystem. During the setup of audio widgets, failure in either the dai_config or widget_kcontrol_setup processes can mistakenly lead to a double decrement of the widget's use_count. This issue arises from the improper handling during the execution path of the widget setup, causing the sof_widget_free_unlocked function to be invoked multiple times. To resolve this, the return flow in the widget free function needs adjustments to avoid cascading failures and ensure resource counts are managed correctly. This fix, relevant for potential backporting, is important for maintaining system stability and performance in audio applications.

References