The ASoC SOF audio driver in the Linux kernel performs a calculation for a compressed stream’s I/O frame position by dividing the current position by the product of channels and container bytes. Because these values default to zero until stream parameters are explicitly configured, the division can trigger a divide‑by‑zero error. This results in a kernel crash or panic, causing a system‑wide denial of service. The weakness is a classic divide‑by‑zero fault, classified as CWE‑369.

Linux kernel builds that include the ASoC SOF driver but have not incorporated the zero‑check patch referenced in the supplied git commit URLs are affected. The specific kernel versions are not listed, so any deployment running a pre‑patch kernel may be vulnerable.

The CVSS score of 5.5 indicates moderate severity. EPSS is < 1%, showing a very low likelihood of exploitation. Based on the description, it is inferred that the attack vector is local or requires privileged interaction with the audio driver. The vulnerability is not listed in CISA KEV. A successful exploit would cause a kernel crash, permanently disrupting system operation until a reboot or patch.