Medium 5.5Published May 28, 2026

CVE-2026-46143ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens

Updated under an hour ago (Oct 28, 2026, 12:23 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens As prepare can be called mulitple times, this can result in multiple graph opens for playback path. This will result in a memory leaks, fix this by adding a check before opening.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Undergoing Analysis
Record last updated: Jun 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from f6e1138d76cc684de3b851fc5cc5dac023a3ee89 before af9cc7c622e596455c5190e6ef53c5b40ea7a90d; from b377d4df8fb00f861acf1a4d48de17b74cf535aa before 3141d8b00cad6d3331953c79060ccc3a0262311b; from be1fae62cf253a5b67526cee9fbc07689b97c125 before c91b7bcc70346d07f57ef03d1b9a338324e213de; from be1fae62cf253a5b67526cee9fbc07689b97c125 before 7cab9f2ad51c858263da836baebad050a1bc7914; from be1fae62cf253a5b67526cee9fbc07689b97c125 before b97493f0f42ab9d882a62466782e1900e481a9d6; from be1fae62cf253a5b67526cee9fbc07689b97c125 before 69acc488aaf39d0ddf6c3cf0e47c1873d39919a2; ee211a845d122ca19dc6a65bbd88c085bee2a57c; from 6.1.154 before 6.1.175; and 2 more ranges	CNA record
linux linux_kernel linux:linux_kernel	from 6.1.154 before 6.1.175; from 6.6.37 before 6.6.140; from 6.9.8 before 6.10; from 6.10.1 before 6.12.88; from 6.13 before 6.18.30; from 6.19 before 7.0.7; 6.10; 6.10; and 1 more ranges	NVD

References

References

https://git.kernel.org/stable/c/af9cc7c622e596455c5190e6ef53c5b40ea7a90d	patch
https://git.kernel.org/stable/c/3141d8b00cad6d3331953c79060ccc3a0262311b	patch
https://git.kernel.org/stable/c/c91b7bcc70346d07f57ef03d1b9a338324e213de	patch
https://git.kernel.org/stable/c/7cab9f2ad51c858263da836baebad050a1bc7914	patch
https://git.kernel.org/stable/c/b97493f0f42ab9d882a62466782e1900e481a9d6	patch
https://git.kernel.org/stable/c/69acc488aaf39d0ddf6c3cf0e47c1873d39919a2	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.