CVE-2026-93187: Linux kernel · ASoC: SOF: ipc4-topology: Return error for invalid number of formats
Affects Linux kernelSource CVE Database V5
Not known to be exploited : upgrade to 4992cdc4eb97981d6ea66002c5b764a6115edb0c or 11e828cd6b0f283ebe9dc6b4cffd38e3321e7725 when convenient.
Data as of 26 Oct 2026, 14:19 UTC
Rated Low by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 9% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 4992cdc4eb97981d6ea66002c5b764a6115edb0c, 11e828cd6b0f283ebe9dc6b4cffd38e3321e7725
Exploitation evidence
Disclosed: evidence found.
CVE published 17 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to 4992cdc4eb97981d6ea66002c5b764a6115edb0c or 11e828cd6b0f283ebe9dc6b4cffd38e3321e7725.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
This issue has been fixed in the Linux kernel versions identified by commits 4992cdc4eb97981d6ea66002c5b764a6115edb0c and 11e828cd6b0f283ebe9dc6b4cffd38e3321e7725. Users should update to these fixed versions to ensure the error is properly reported and handled.
Description
A vulnerability in the Linux kernel's ASoC SOF ipc4-topology component causes functions to incorrectly report success when the number of input or output formats is zero, due to an error code not being set properly. This flaw was fixed by ensuring the error code is set to -EINVAL before returning, allowing the caller to detect the failure.