CVE-2026-97414 ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend()
A missing NULL check in the MediaTek audio driver can cause a kernel crash during suspend, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-97414?
CVE-2026-97414 is a vulnerability in Linux, published on 24 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend()
mt8365_afe_suspend() allocates the register backup buffer with devm_kcalloc(), but does not check for allocation failure before using the returned pointer. This may lead to a NULL pointer dereference when accessing afe->reg_back_up[i].
Add the missing NULL check and return -ENOMEM on allocation failure after disabling the main clock.
Also propagate the return value of mt8365_afe_suspend() in mt8365_afe_dev_runtime_suspend() so that the suspended state is not updated when suspend fails.
Which versions are affected by CVE-2026-97414?
How do I fix CVE-2026-97414?
Apply the vendor's patch.
Is CVE-2026-97414 being exploited?
There is no known exploitation of CVE-2026-97414 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-97414, DEBIAN-CVE-2026-97414, GHSA-cfm8-jq8w-4xxp, UBUNTU-CVE-2026-97414.