Riskcovery

CVE-2026-74332

ASoC: amd: acp-sdw-sof: Bound DAI link iteration

State
Published
Severity
8.4 High
Published
Aug 15, 2026
Updated
Oct 16, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: amd: acp-sdw-sof: Bound DAI link iteration

create_sdw_dailinks() walks sof_dais until it finds an entry with initialised cleared, but sof_dais is allocated with exactly num_ends entries. If all entries are initialised, the loop reads past the end of the array.

Pass the allocated entry count to create_sdw_dailinks() and stop before reading past the array.

Scores

CVSSScoreVectorSource
3.18.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6d8348ddc56ed43ba39d1e8adda13299201f32ed to before 0a5ff4000dd7a390139dd7823fef1de4963e490aAffected
  • 6d8348ddc56ed43ba39d1e8adda13299201f32ed to before 9e82497138abea7d5c6e65015663d907fbcbf6b4Affected
  • 6d8348ddc56ed43ba39d1e8adda13299201f32ed to before 86a64c049873fe4d4a6a378e27a333ab5631c4b2Affected
  • 6d8348ddc56ed43ba39d1e8adda13299201f32ed to before 4d992e63f52d58f52b724606c60ae7b37a1c582fAffected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.