{"id":49578,"date":"2026-04-27T10:09:56","date_gmt":"2026-04-27T10:09:56","guid":{"rendered":"http:\/\/localhost\/?p=49578"},"modified":"2026-04-27T10:09:56","modified_gmt":"2026-04-27T10:09:56","slug":"asoc-qcom-q6apm-move-component-registration-to-unmanaged-version","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=49578","title":{"rendered":"ASoC: qcom: q6apm: move component registration to unmanaged version_CVE-2026-31587"},"content":{"rendered":"

{“lastseen”:””,”description”:”In the Linux kernel, the following vulnerability has been resolved:\\n\\nASoC: qcom: q6apm: move component registration to unmanaged version\\n\\nq6apm component registers dais dynamically from ASoC toplology, which\\nare allocated using device managed version apis. Allocating both\\ncomponent and dynamic dais using managed version could lead to incorrect\\nfree ordering, dai will be freed while component still holding references\\nto it.\\n\\nFix this issue by moving component to unmanged version so\\nthat the dai pointers are only freeded after the component is removed.\\n\\n==================================================================\\nBUG: KASAN: slab-use-after-free in snd_soc_del_component_unlocked+0x3d4\/0x400 [snd_soc_core]\\nRead of size 8 at addr ffff00084493a6e8 by task kworker\/u48:0\/3426\\nTainted: [W]=WARN\\nHardware name: LENOVO 21N2ZC5PUS\/21N2ZC5PUS, BIOS N42ET57W (1.31 ) 08\/08\/2024\\nWorkqueue: pdr_notifier_wq pdr_notifier_work [pdr_interface]\\nCall trace:\\n show_stack+0x28\/0x7c (C)\\n dump_stack_lvl+0x60\/0x80\\n print_report+0x160\/0x4b4\\n kasan_report+0xac\/0xfc\\n __asan_report_load8_noabort+0x20\/0x34\\n snd_soc_del_component_unlocked+0x3d4\/0x400 [snd_soc_core]\\n snd_soc_unregister_component_by_driver+0x50\/0x88 [snd_soc_core]\\n devm_component_release+0x30\/0x5c [snd_soc_core]\\n devres_release_all+0x13c\/0x210\\n device_unbind_cleanup+0x20\/0x190\\n device_release_driver_internal+0x350\/0x468\\n device_release_driver+0x18\/0x30\\n bus_remove_device+0x1a0\/0x35c\\n device_del+0x314\/0x7f0\\n device_unregister+0x20\/0xbc\\n apr_remove_device+0x5c\/0x7c [apr]\\n device_for_each_child+0xd8\/0x160\\n apr_pd_status+0x7c\/0xa8 [apr]\\n pdr_notifier_work+0x114\/0x240 [pdr_interface]\\n process_one_work+0x500\/0xb70\\n worker_thread+0x630\/0xfb0\\n kthread+0x370\/0x6c0\\n ret_from_fork+0x10\/0x20\\n\\nAllocated by task 77:\\n kasan_save_stack+0x40\/0x68\\n kasan_save_track+0x20\/0x40\\n kasan_save_alloc_info+0x44\/0x58\\n __kasan_kmalloc+0xbc\/0xdc\\n __kmalloc_node_track_caller_noprof+0x1f4\/0x620\\n devm_kmalloc+0x7c\/0x1c8\\n snd_soc_register_dai+0x50\/0x4f0 [snd_soc_core]\\n soc_tplg_pcm_elems_load+0x55c\/0x1eb8 [snd_soc_core]\\n snd_soc_tplg_component_load+0x4f8\/0xb60 [snd_soc_core]\\n audioreach_tplg_init+0x124\/0x1fc [snd_q6apm]\\n q6apm_audio_probe+0x10\/0x1c [snd_q6apm]\\n snd_soc_component_probe+0x5c\/0x118 [snd_soc_core]\\n soc_probe_component+0x44c\/0xaf0 [snd_soc_core]\\n snd_soc_bind_card+0xad0\/0x2370 [snd_soc_core]\\n snd_soc_register_card+0x3b0\/0x4c0 [snd_soc_core]\\n devm_snd_soc_register_card+0x50\/0xc8 [snd_soc_core]\\n x1e80100_platform_probe+0x208\/0x368 [snd_soc_x1e80100]\\n platform_probe+0xc0\/0x188\\n really_probe+0x188\/0x804\\n __driver_probe_device+0x158\/0x358\\n driver_probe_device+0x60\/0x190\\n __device_attach_driver+0x16c\/0x2a8\\n bus_for_each_drv+0x100\/0x194\\n __device_attach+0x174\/0x380\\n device_initial_probe+0x14\/0x20\\n bus_probe_device+0x124\/0x154\\n deferred_probe_work_func+0x140\/0x220\\n process_one_work+0x500\/0xb70\\n worker_thread+0x630\/0xfb0\\n kthread+0x370\/0x6c0\\n ret_from_fork+0x10\/0x20\\n\\nFreed by task 3426:\\n kasan_save_stack+0x40\/0x68\\n kasan_save_track+0x20\/0x40\\n __kasan_save_free_info+0x4c\/0x80\\n __kasan_slab_free+0x78\/0xa0\\n kfree+0x100\/0x4a4\\n devres_release_all+0x144\/0x210\\n device_unbind_cleanup+0x20\/0x190\\n device_release_driver_internal+0x350\/0x468\\n device_release_driver+0x18\/0x30\\n bus_remove_device+0x1a0\/0x35c\\n device_del+0x314\/0x7f0\\n device_unregister+0x20\/0xbc\\n apr_remove_device+0x5c\/0x7c [apr]\\n device_for_each_child+0xd8\/0x160\\n apr_pd_status+0x7c\/0xa8 [apr]\\n pdr_notifier_work+0x114\/0x240 [pdr_interface]\\n process_one_work+0x500\/0xb70\\n worker_thread+0x630\/0xfb0\\n kthread+0x370\/0x6c0\\n ret_from_fork+0x10\/0x20″,”published”:”2026-04-24T14:42:15.625Z”,”modified”:”2026-04-27T14:04:12.452Z”,”type”:”cve”,”title”:”ASoC: qcom: q6apm: move component registration to unmanaged version”,”source”:”Linux”,”references”:”https:\/\/git.kernel.org\/stable\/c\/887632163b546a8944b46ef465f1d74e838b727a\\nhttps:\/\/git.kernel.org\/stable\/c\/b7412ed789ffb1e59c8d6f5ab6a6a718963c85e2\\nhttps:\/\/git.kernel.org\/stable\/c\/30383b7780ffa140bc124de5b66cae7c84133dbb\\nhttps:\/\/git.kernel.org\/stable\/c\/f7b790531cdad3b2075ab937aa06d7b802403be4\\nhttps:\/\/git.kernel.org\/stable\/c\/a561a55b79a9c55f0443377f2d4dcf6149d057af\\nhttps:\/\/git.kernel.org\/stable\/c\/6ec1235fc941dac6c011b30ee01d9220ff87e0cd”,”id”:”CVE-2026-31587″,”bulletinFamily”:””,”cwe”:null,”cvelist”:null,”sourceData”:”Linux Linux 5477518b8a0e8a45239646acd80c9bafc4401522\\nLinux Linux 5477518b8a0e8a45239646acd80c9bafc4401522\\nLinux Linux 5477518b8a0e8a45239646acd80c9bafc4401522\\nLinux Linux 5477518b8a0e8a45239646acd80c9bafc4401522\\nLinux Linux 5477518b8a0e8a45239646acd80c9bafc4401522\\nLinux Linux 5477518b8a0e8a45239646acd80c9bafc4401522\\nLinux Linux 5.16″,”sourceHref”:””,”cvss”:{“score”:7.8,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:L\/AC:L\/PR:L\/UI:N\/S:U\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”Linux”,”version”:”5477518b8a0e8a45239646acd80c9bafc4401522″,”vendor”:”Linux”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"

{“lastseen”:””,”description”:”In the Linux kernel, the following vulnerability has been resolved:\\n\\nASoC: qcom: q6apm: move component registration to unmanaged version\\n\\nq6apm component registers dais dynamically from ASoC toplology,…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,28,12,15,13,7,11,5],"class_list":["post-49578","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-78","tag-exploit","tag-high","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\nASoC: qcom: q6apm: move component registration to unmanaged version_CVE-2026-31587 - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=49578\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ASoC: qcom: q6apm: move component registration to unmanaged version_CVE-2026-31587 - zero redgem\" \/>\n<meta property=\"og:description\" content=\"{“lastseen”:””,”description”:”In the Linux kernel, the following vulnerability has been resolved:nnASoC: qcom: q6apm: move component registration to unmanaged versionnnq6apm component registers dais dynamically from ASoC toplology,...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=49578\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2026-04-27T10:09:56+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=49578#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=49578\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"ASoC: qcom: q6apm: move component registration to unmanaged version_CVE-2026-31587\",\"datePublished\":\"2026-04-27T10:09:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=49578\"},\"wordCount\":971,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"CVSS-7.8\",\"exploit\",\"HIGH\",\"news\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_cve\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=49578#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=49578\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=49578\",\"name\":\"ASoC: qcom: q6apm: move component registration to unmanaged version_CVE-2026-31587 - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2026-04-27T10:09:56+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=49578#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=49578\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=49578#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ASoC: qcom: q6apm: move component registration to unmanaged version_CVE-2026-31587\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ASoC: qcom: q6apm: move component registration to unmanaged version_CVE-2026-31587 - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=49578","og_locale":"en_US","og_type":"article","og_title":"ASoC: qcom: q6apm: move component registration to unmanaged version_CVE-2026-31587 - zero redgem","og_description":"{“lastseen”:””,”description”:”In the Linux kernel, the following vulnerability has been resolved:nnASoC: qcom: q6apm: move component registration to unmanaged versionnnq6apm component registers dais dynamically from ASoC toplology,...","og_url":"https:\/\/zero.redgem.net\/?p=49578","og_site_name":"zero redgem","article_published_time":"2026-04-27T10:09:56+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=49578#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=49578"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"ASoC: qcom: q6apm: move component registration to unmanaged version_CVE-2026-31587","datePublished":"2026-04-27T10:09:56+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=49578"},"wordCount":971,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","CVSS-7.8","exploit","HIGH","news","Security","tapic","Vulnerability"],"articleSection":["category_cve"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=49578#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=49578","url":"https:\/\/zero.redgem.net\/?p=49578","name":"ASoC: qcom: q6apm: move component registration to unmanaged version_CVE-2026-31587 - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2026-04-27T10:09:56+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=49578#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=49578"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=49578#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"ASoC: qcom: q6apm: move component registration to unmanaged version_CVE-2026-31587"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/49578","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=49578"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/49578\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=49578"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=49578"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=49578"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}