Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() If either… (CVE-2026-80911)

The vulnerability in the Linux kernel's ASoC SOF audio driver involved improper handling of error paths in the sof_widget_setup_unlocked() function. Specifically, if tplg_ops->dai_config or widget_kcontrol_setup failed during widget setup, the sof_widget_free_unlocked() function was called twice, causing the widget's use_count to be decremented twice and core_put() to be invoked twice. This could lead to resource mismanagement such as double frees. The fix ensures that once the use_count and core_put() are handled within widget_free, the function returns immediately without falling through to the pipe_widget_free label, preventing double freeing. The patch is considered stable enough for backporting.

The vulnerability could cause double decrementing of reference counts and double invocation of cleanup functions, potentially leading to resource management issues such as double frees. This may affect kernel stability or cause undefined behavior in the audio subsystem. There is no indication of active exploitation or direct security compromise from the provided data.

A fix for this vulnerability has been implemented in the Linux kernel source code. Users should apply the official kernel updates that include this patch. Since this is a kernel-level fix, upgrading to a kernel version containing the patch is the recommended remediation. Patch status is not explicitly confirmed in the input data; users should verify with the vendor or kernel maintainers for the exact fixed versions and apply updates accordingly.