CVE-2026-72415

Status: UPDATED  |  Advisory ID: CVE-2026-72415

Key Details

Affected Products, Subsystems & Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SDCA: Validate written enum value in ge_put_enum_double()

ge_put_enum_double() passes the user-supplied enumeration index

item[0] to snd_soc_enum_item_to_val() without checking it against the

number of items in the enum:

ret = snd_soc_enum_item_to_val(e, item[0]);

snd_soc_enum_item_to_val() indexes the heap-allocated e->values[] array

with that index (e->values is set from a devm_kcalloc() of e->items

entries), so a control write with an out-of-range item[0] reads past the

end of the values buffer. The bounds check in

snd_soc_dapm_put_enum_double() only runs afterwards, so it does not

prevent the read here.

Reject an out-of-range item before using it, matching the other enum put

handlers.

This issue was pointed out by the Sashiko AI review bot while reviewing a

related enum-validation series:

https://lore.kernel.org/all/[email protected]/ (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References