CVE-2026-53052
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
In the ASoC audio driver for Qualcomm platforms (qdsp6), the widget type is not checked before accessing private data. A virtual widget may lack an associated DSP graph, leading to incorrect memory access.
Risk Assessment
This vulnerability can cause incorrect kernel memory read/write, potentially leading to system crash or privilege escalation.
Recommendation
Update the Linux kernel to a version containing the fix for CVE-2026-53052.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: qdsp6: topology: check widget type before accessing data Check widget type before accessing the private data, as this could a virtual widget which is no associated with a dsp graph, container and module. Accessing witout check could lead to incorrect memory access.