Not yet scoredPublished Aug 26, 2026

CVE-2026-80581ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout

Updated under an hour ago (Oct 26, 2026, 4:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out. If the firmware has crashed the kernel still needs to go through the state changes to reset its internal to be able to correctly work the next time the DSP is booted up. The case with IPC timeout is a bit more problematic, but it has been rootcaused to be the result of system scheduling blockage and the firmware did actually received and handled the message, but the reply handling got blocked by issues outside of the SOF stack. So far the best way to handle this is to continue with setting the state.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 3cac6eebea9b4bc5f041e157e45c76e212ad6759 before 4931c09d83877dc350106bae745321c3f295129b; from c40aad7c81e5fba34b70123ed7ce3397fa62a4d2 before 96d51b8c5a909937d41f9c03495188d4190f877d; from c40aad7c81e5fba34b70123ed7ce3397fa62a4d2 before f2435a46dfa1a5693cf2664afd022db66ee58121; from c40aad7c81e5fba34b70123ed7ce3397fa62a4d2 before 6b512a5330ef1a41db7aff4b80c4e952b8d52f17; from c40aad7c81e5fba34b70123ed7ce3397fa62a4d2 before 17661c67b206612cb3ba65d5ae726cd2015d0a53; d153e8b154f9746ac969c85a4e6474760453647c; from 6.6.23 before 6.6.154; from 6.7.11 before 6.8	CNA record

References

References

https://git.kernel.org/stable/c/4931c09d83877dc350106bae745321c3f295129b
https://git.kernel.org/stable/c/96d51b8c5a909937d41f9c03495188d4190f877d
https://git.kernel.org/stable/c/f2435a46dfa1a5693cf2664afd022db66ee58121
https://git.kernel.org/stable/c/6b512a5330ef1a41db7aff4b80c4e952b8d52f17
https://git.kernel.org/stable/c/17661c67b206612cb3ba65d5ae726cd2015d0a53

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.