GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-43459 (GCVE-0-2026-43459)

Vulnerability from cvelistv5 – Published: 2026-05-08 14:22 – Updated: 2026-08-05 12:28
VLAI
Title
ASoC: soc-core: flush delayed work before removing DAIs and widgets
Summary
In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: flush delayed work before removing DAIs and widgets When a sound card is unbound while a PCM stream is open, a use-after-free can occur in snd_soc_dapm_stream_event(), called from the close_delayed_work workqueue handler. During unbind, snd_soc_unbind_card() flushes delayed work and then calls soc_cleanup_card_resources(). Inside cleanup, snd_card_disconnect_sync() releases all PCM file descriptors, and the resulting PCM close path can call snd_soc_dapm_stream_stop() which schedules new delayed work with a pmdown_time timer delay. Since this happens after the flush in snd_soc_unbind_card(), the new work is not caught. soc_remove_link_components() then frees DAPM widgets before this work fires, leading to the use-after-free. The existing flush in soc_free_pcm_runtime() also cannot help as it runs after soc_remove_link_components() has already freed the widgets. Add a flush in soc_cleanup_card_resources() after snd_card_disconnect_sync() (after which no new PCM closes can schedule further delayed work) and before soc_remove_link_dais() and soc_remove_link_components() (which tear down the structures the delayed work accesses).
Severity
7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: e894efef9ac7c10b7727798dcc711cccf07569f9 , < bf80a89da97285d9b877e0c6995e870d46b8025c (git)
Affected: e894efef9ac7c10b7727798dcc711cccf07569f9 , < 3887e514978d28216246360b46a9cb534969eb5a (git)
Affected: e894efef9ac7c10b7727798dcc711cccf07569f9 , < 231568afbc0cd25b8fb2a94ebf9738eabe1cf007 (git)
Affected: e894efef9ac7c10b7727798dcc711cccf07569f9 , < 317a9298c54bb00319da73e5a7179f00e67fcbdf (git)
Affected: e894efef9ac7c10b7727798dcc711cccf07569f9 , < eab71e11ce2447c1e01809cbc11eab4234cf8dc8 (git)
Affected: e894efef9ac7c10b7727798dcc711cccf07569f9 , < 7d33e6140945482a07f8089ee86e13e02553ffdb (git)
Affected: e894efef9ac7c10b7727798dcc711cccf07569f9 , < c054f0607c8bb1b1aa529bc109e4149298a1cccd (git)
Affected: e894efef9ac7c10b7727798dcc711cccf07569f9 , < 95bc5c225513fc3c4ce169563fb5e3929fbb938b (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.20
Unaffected: 0 , < 4.20 (semver)
Unaffected: 5.10.253 , ≤ 5.10.* (semver)
Unaffected: 5.15.203 , ≤ 5.15.* (semver)
Unaffected: 6.1.167 , ≤ 6.1.* (semver)
Unaffected: 6.6.130 , ≤ 6.6.* (semver)
Unaffected: 6.12.78 , ≤ 6.12.* (semver)
Unaffected: 6.18.19 , ≤ 6.18.* (semver)
Unaffected: 6.19.9 , ≤ 6.19.* (semver)
Unaffected: 7.0 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "sound/soc/soc-core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "bf80a89da97285d9b877e0c6995e870d46b8025c",
              "status": "affected",
              "version": "e894efef9ac7c10b7727798dcc711cccf07569f9",
              "versionType": "git"
            },
            {
              "lessThan": "3887e514978d28216246360b46a9cb534969eb5a",
              "status": "affected",
              "version": "e894efef9ac7c10b7727798dcc711cccf07569f9",
              "versionType": "git"
            },
            {
              "lessThan": "231568afbc0cd25b8fb2a94ebf9738eabe1cf007",
              "status": "affected",
              "version": "e894efef9ac7c10b7727798dcc711cccf07569f9",
              "versionType": "git"
            },
            {
              "lessThan": "317a9298c54bb00319da73e5a7179f00e67fcbdf",
              "status": "affected",
              "version": "e894efef9ac7c10b7727798dcc711cccf07569f9",
              "versionType": "git"
            },
            {
              "lessThan": "eab71e11ce2447c1e01809cbc11eab4234cf8dc8",
              "status": "affected",
              "version": "e894efef9ac7c10b7727798dcc711cccf07569f9",
              "versionType": "git"
            },
            {
              "lessThan": "7d33e6140945482a07f8089ee86e13e02553ffdb",
              "status": "affected",
              "version": "e894efef9ac7c10b7727798dcc711cccf07569f9",
              "versionType": "git"
            },
            {
              "lessThan": "c054f0607c8bb1b1aa529bc109e4149298a1cccd",
              "status": "affected",
              "version": "e894efef9ac7c10b7727798dcc711cccf07569f9",
              "versionType": "git"
            },
            {
              "lessThan": "95bc5c225513fc3c4ce169563fb5e3929fbb938b",
              "status": "affected",
              "version": "e894efef9ac7c10b7727798dcc711cccf07569f9",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "sound/soc/soc-core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "lessThan": "4.20",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.253",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.130",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.78",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.253",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.167",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.130",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.78",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.19",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.9",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: soc-core: flush delayed work before removing DAIs and widgets\n\nWhen a sound card is unbound while a PCM stream is open, a\nuse-after-free can occur in snd_soc_dapm_stream_event(), called from\nthe close_delayed_work workqueue handler.\n\nDuring unbind, snd_soc_unbind_card() flushes delayed work and then\ncalls soc_cleanup_card_resources(). Inside cleanup,\nsnd_card_disconnect_sync() releases all PCM file descriptors, and\nthe resulting PCM close path can call snd_soc_dapm_stream_stop()\nwhich schedules new delayed work with a pmdown_time timer delay.\nSince this happens after the flush in snd_soc_unbind_card(), the\nnew work is not caught. soc_remove_link_components() then frees\nDAPM widgets before this work fires, leading to the use-after-free.\n\nThe existing flush in soc_free_pcm_runtime() also cannot help as it\nruns after soc_remove_link_components() has already freed the widgets.\n\nAdd a flush in soc_cleanup_card_resources() after\nsnd_card_disconnect_sync() (after which no new PCM closes can\nschedule further delayed work) and before soc_remove_link_dais()\nand soc_remove_link_components() (which tear down the structures the\ndelayed work accesses)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable ASoC/ALSA teardown path is reached locally through open PCM device files and sound-card driver unbind/removal, not by network or adjacent inputs.\nAC:L - Once a PCM playback stream is open and card unbind occurs, the delayed work is queued deterministically after disconnect; no attacker-uncontrolled race win is required.\nPR:L - A low-privileged local user with access to ALSA PCM devices can control the open stream and close side of the sequence. The unbind side is normally root-mediated, but the lower-privileged scenario is defensible when paired with required user/admin interaction.\nUI:R - A non-admin attacker cannot normally write the root-owned sysfs driver unbind attribute or unload the driver, so exploitation in the low-privileged scenario requires a privileged user or system action to unbind/remove the sound card.\nS:U - The impact remains within the local kernel security authority; this is not a VM escape, IOMMU bypass, or cross-scope boundary violation.\nC:H - The bug is a kernel use-after-free in delayed work over freed DAPM/DAI-related objects. Following kernel scoring guidance, UAF memory corruption can enable high-impact information disclosure.\nI:H - The delayed work writes through freed widget/list objects and can corrupt kernel heap state. Following kernel scoring guidance, UAF memory corruption is treated as potentially enabling arbitrary write or control-flow compromise.\nA:H - Even without full exploitation, the use-after-free can dereference or mutate freed kernel objects from a workqueue and plausibly cause an oops, panic, or hang."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:28:04.321Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/bf80a89da97285d9b877e0c6995e870d46b8025c"
        },
        {
          "url": "https://git.kernel.org/stable/c/3887e514978d28216246360b46a9cb534969eb5a"
        },
        {
          "url": "https://git.kernel.org/stable/c/231568afbc0cd25b8fb2a94ebf9738eabe1cf007"
        },
        {
          "url": "https://git.kernel.org/stable/c/317a9298c54bb00319da73e5a7179f00e67fcbdf"
        },
        {
          "url": "https://git.kernel.org/stable/c/eab71e11ce2447c1e01809cbc11eab4234cf8dc8"
        },
        {
          "url": "https://git.kernel.org/stable/c/7d33e6140945482a07f8089ee86e13e02553ffdb"
        },
        {
          "url": "https://git.kernel.org/stable/c/c054f0607c8bb1b1aa529bc109e4149298a1cccd"
        },
        {
          "url": "https://git.kernel.org/stable/c/95bc5c225513fc3c4ce169563fb5e3929fbb938b"
        }
      ],
      "title": "ASoC: soc-core: flush delayed work before removing DAIs and widgets",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43459",
    "datePublished": "2026-05-08T14:22:22.651Z",
    "dateReserved": "2026-05-01T14:12:56.010Z",
    "dateUpdated": "2026-08-05T12:28:04.321Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-43459",
      "date": "2026-09-16",
      "epss": "0.00113",
      "percentile": "0.01643"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-43459\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-08T15:16:58.753\",\"lastModified\":\"2026-06-17T10:49:38.523\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nASoC: soc-core: flush delayed work before removing DAIs and widgets\\n\\nWhen a sound card is unbound while a PCM stream is open, a\\nuse-after-free can occur in snd_soc_dapm_stream_event(), called from\\nthe close_delayed_work workqueue handler.\\n\\nDuring unbind, snd_soc_unbind_card() flushes delayed work and then\\ncalls soc_cleanup_card_resources(). Inside cleanup,\\nsnd_card_disconnect_sync() releases all PCM file descriptors, and\\nthe resulting PCM close path can call snd_soc_dapm_stream_stop()\\nwhich schedules new delayed work with a pmdown_time timer delay.\\nSince this happens after the flush in snd_soc_unbind_card(), the\\nnew work is not caught. soc_remove_link_components() then frees\\nDAPM widgets before this work fires, leading to the use-after-free.\\n\\nThe existing flush in soc_free_pcm_runtime() also cannot help as it\\nruns after soc_remove_link_components() has already freed the widgets.\\n\\nAdd a flush in soc_cleanup_card_resources() after\\nsnd_card_disconnect_sync() (after which no new PCM closes can\\nschedule further delayed work) and before soc_remove_link_dais()\\nand soc_remove_link_components() (which tear down the structures the\\ndelayed work accesses).\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"sound/soc/soc-core.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"e894efef9ac7c10b7727798dcc711cccf07569f9\",\"lessThan\":\"bf80a89da97285d9b877e0c6995e870d46b8025c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e894efef9ac7c10b7727798dcc711cccf07569f9\",\"lessThan\":\"3887e514978d28216246360b46a9cb534969eb5a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e894efef9ac7c10b7727798dcc711cccf07569f9\",\"lessThan\":\"231568afbc0cd25b8fb2a94ebf9738eabe1cf007\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e894efef9ac7c10b7727798dcc711cccf07569f9\",\"lessThan\":\"317a9298c54bb00319da73e5a7179f00e67fcbdf\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e894efef9ac7c10b7727798dcc711cccf07569f9\",\"lessThan\":\"eab71e11ce2447c1e01809cbc11eab4234cf8dc8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e894efef9ac7c10b7727798dcc711cccf07569f9\",\"lessThan\":\"7d33e6140945482a07f8089ee86e13e02553ffdb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e894efef9ac7c10b7727798dcc711cccf07569f9\",\"lessThan\":\"c054f0607c8bb1b1aa529bc109e4149298a1cccd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e894efef9ac7c10b7727798dcc711cccf07569f9\",\"lessThan\":\"95bc5c225513fc3c4ce169563fb5e3929fbb938b\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"sound/soc/soc-core.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.20\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.20\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.253\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.203\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.167\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.130\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.78\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.19\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.9\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.3,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.10.253\",\"matchCriteriaId\":\"95D48ED0-67BC-4B98-8122-F911E04187F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.203\",\"matchCriteriaId\":\"20DDB3E9-AABF-4107-ADB0-5362AA067045\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.167\",\"matchCriteriaId\":\"2EDC6BAF-B710-4E26-B6AA-D68922EE7B43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.130\",\"matchCriteriaId\":\"C57BB918-DF28-46B3-94F7-144176841267\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.78\",\"matchCriteriaId\":\"28D591F5-B196-4CC9-905C-DC80F116E7A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.19\",\"matchCriteriaId\":\"D394AC60-6F28-435F-872A-CCDF384B8331\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"6.19.9\",\"matchCriteriaId\":\"E825E7C3-FEAC-4FD3-8A81-78D7387948C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F253B622-8837-4245-BCE5-A7BF8FC76A16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F666C8D8-6538-46D4-B318-87610DE64C34\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/231568afbc0cd25b8fb2a94ebf9738eabe1cf007\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/317a9298c54bb00319da73e5a7179f00e67fcbdf\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3887e514978d28216246360b46a9cb534969eb5a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7d33e6140945482a07f8089ee86e13e02553ffdb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/95bc5c225513fc3c4ce169563fb5e3929fbb938b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/bf80a89da97285d9b877e0c6995e870d46b8025c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c054f0607c8bb1b1aa529bc109e4149298a1cccd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/eab71e11ce2447c1e01809cbc11eab4234cf8dc8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-02T19:42:39+00:00",
      "cve": "CVE-2026-43459",
      "id": "CVE-2026-43459",
      "initial_release_date": "2026-05-08T00:00:00+00:00",
      "product_status:known_affected": "232",
      "product_status:known_not_affected": "42",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ASoC: soc-core: flush delayed work before removing DAIs and widgets",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43459.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T17:03:56Z",
      "cve": "CVE-2026-43459",
      "id": "CVE-2026-43459",
      "initial_release_date": "2026-05-11T14:13:24Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "578",
      "product_status:known_not_affected": "140",
      "product_status:recommended": "250",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-43459",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-43459.json",
      "version": "8"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.