CVE-2026-74292

ASoC: tegra: tegra210_ahub: Validate written enum value

State: Published
Severity: 7.1 High
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: tegra: tegra210_ahub: Validate written enum value

tegra_ahub_put_value_enum() reads e->values[item[0]] before checking whether item[0] is within the enum item range. The existing check therefore happens too late to prevent an out-of-range read of the values array.

Move the check before the array access.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before 4e45e4c2015519a39c40eb575c03b77807fb5080Affected 16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before 964f8f9015fb117402d8d2186593397cd93388e9Affected 16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before 2ec7d16fe21c68b0879873a2abf9aac854c96134Affected 16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before 4bcb23635d5059ee71f3fb89719ea14aada6fd59Affected 16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before f67d63628fe158b3a6e6b33a2b8c83ff118699d1Affected 16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before e098c9c6477dfa3cb363282100108484ceba5cc5Affected 16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before 226d93b65f4f99b35fb7a03bdb24acb577364ebcAffected 16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before 1d8aabb413b5638670dfd1162169edc0ba276a2eAffected
LinuxLinux	5.9Affected before 5.9Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before 4e45e4c2015519a39c40eb575c03b77807fb5080Affected
16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before 964f8f9015fb117402d8d2186593397cd93388e9Affected
16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before 2ec7d16fe21c68b0879873a2abf9aac854c96134Affected
16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before 4bcb23635d5059ee71f3fb89719ea14aada6fd59Affected
16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before f67d63628fe158b3a6e6b33a2b8c83ff118699d1Affected
16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before e098c9c6477dfa3cb363282100108484ceba5cc5Affected
16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before 226d93b65f4f99b35fb7a03bdb24acb577364ebcAffected
16e1bcc2caf446fa3e1daa040b59fd6f6272a766 to before 1d8aabb413b5638670dfd1162169edc0ba276a2eAffected

LinuxLinux

5.9Affected
before 5.9Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.