CVE-2026-74293

ASoC: fsl: fsl_audmix: Validate written enum values

State: Published
Severity: 7.8 High
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: fsl: fsl_audmix: Validate written enum values

fsl_audmix_put_mix_clk_src() and fsl_audmix_put_out_src() convert the user-provided enum item with snd_soc_enum_item_to_val() before checking whether the item is within the enum's item count.

The generic snd_soc_put_enum_double() helper performs that validation, but these callbacks use the converted value first: the clock-source path tests it with BIT(), and the output-source path indexes the prms transition table with it.

Reject out-of-range enum items before converting them.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	be1df61cf06efb355c90702e46b8d46f055acb4e to before 7513831b90a38d55fa089e3e1b49691e467afee6Affected be1df61cf06efb355c90702e46b8d46f055acb4e to before b4774a7da12b14fc37219ab4368d1907f9b5aca4Affected be1df61cf06efb355c90702e46b8d46f055acb4e to before 8fb4364eb494b926d009bfaf3c98f07c3aa5d9f3Affected be1df61cf06efb355c90702e46b8d46f055acb4e to before 0b10c6203e62d9e7337cc401568b201f9bac79ecAffected be1df61cf06efb355c90702e46b8d46f055acb4e to before b36d6d48faa6b1bb723b8f4e527c531a1a68520eAffected be1df61cf06efb355c90702e46b8d46f055acb4e to before 0f1510e84d7bfc3eb9538efa65c6ea0aadf1078cAffected be1df61cf06efb355c90702e46b8d46f055acb4e to before 5b7a23c1ed04e794ef3b31e452ef5c93e1e34b4aAffected be1df61cf06efb355c90702e46b8d46f055acb4e to before 3cd17e4e2871114d5579fa7bc8da66faf7fc1930Affected
LinuxLinux	5.2Affected before 5.2Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

be1df61cf06efb355c90702e46b8d46f055acb4e to before 7513831b90a38d55fa089e3e1b49691e467afee6Affected
be1df61cf06efb355c90702e46b8d46f055acb4e to before b4774a7da12b14fc37219ab4368d1907f9b5aca4Affected
be1df61cf06efb355c90702e46b8d46f055acb4e to before 8fb4364eb494b926d009bfaf3c98f07c3aa5d9f3Affected
be1df61cf06efb355c90702e46b8d46f055acb4e to before 0b10c6203e62d9e7337cc401568b201f9bac79ecAffected
be1df61cf06efb355c90702e46b8d46f055acb4e to before b36d6d48faa6b1bb723b8f4e527c531a1a68520eAffected
be1df61cf06efb355c90702e46b8d46f055acb4e to before 0f1510e84d7bfc3eb9538efa65c6ea0aadf1078cAffected
be1df61cf06efb355c90702e46b8d46f055acb4e to before 5b7a23c1ed04e794ef3b31e452ef5c93e1e34b4aAffected
be1df61cf06efb355c90702e46b8d46f055acb4e to before 3cd17e4e2871114d5579fa7bc8da66faf7fc1930Affected

LinuxLinux

5.2Affected
before 5.2Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.