During initialization of an ASoC SOF audio widget, the code incorrectly decrements the widget’s use count twice when either tplg_ops->dai_config or widget_kcontrol_setup fails. The duplicated decrement also causes core_put to be called twice, leading to premature release of kernel resources. This double release can cause a use‑after‑free or double‑free condition, allowing a local attacker to corrupt kernel memory, crash the system, or potentially execute arbitrary code with elevated privileges.

Any Linux kernel that includes the ASoC SOF audio subsystem without the described patch is affected. The vulnerability exists in all kernel releases that contain the outdated widget setup routine, before the commit referenced in the public git logs. No specific vendor or version numbers are listed, but all distributions shipping the kernel with the ASoC SOF driver are impacted until the fix is applied.

The CVSS score is not provided, EPSS data is unavailable, and the vulnerability is not listed in CISA’s KEV catalog. Based on the nature of the bug, the attack requires local privilege to trigger a widget setup failure and exploit the double free, making it a high‑severity local privilege escalation vector. The risk is moderate to high for systems that expose the audio driver to untrusted users or processes and use the affected kernel version.