In the Linux kernel’s ALSA System on Chip (ASoC) subsystem, a cached IPC payload for copier widgets is reused across suspend and resume cycles. The payload contains DMA channel identifiers that may change when the system resumes, but the code fails to rebuild the buffer, causing the firmware to receive stale DMA assignments. This mismatch leads to DMA channel conflicts that manifest as firmware errors and crashes, interrupting audio functionality.

Vulnerability affects the Linux kernel’s audio subsystem (ASoC) in all distributions that include the captured code path, particularly versions that have not yet incorporated the patch described in the referenced git commits. The issue is present in the ASoC SOF (Sound Open Firmware) components handling the ipc4 topology. No specific vendor or product name beyond the generic Linux kernel is listed, so any system running that kernel component is potentially affected.

If an attacker can control or influence audio suspend/resume sequences (for example, via user space audio applications or the kernel’s audio driver), they can trigger the flawed IPC payload usage. The exploit would lead to firmware crashes rather than arbitrary code execution, constituting a denial‑of‑service risk that could affect embedded systems or machines with critical audio services. The CVSS score is not supplied, and EPSS is unavailable; the vulnerability is not in the CISA KEV catalog, implying limited public exploitation yet. The likely attack vector is local, requiring privileged access to audio drivers or the ability to execute user space code that interacts with the ASO audio interfaces.