Riskcovery

CVE-2026-74333

ASoC: amd: acp-sdw-legacy: Bound DAI link iteration

State
Published
Severity
8.4 High
Published
Aug 15, 2026
Updated
Oct 16, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: amd: acp-sdw-legacy: Bound DAI link iteration

create_sdw_dailinks() walks soc_dais until it finds an entry with initialised cleared, but soc_dais is allocated with exactly num_ends entries. If all entries are initialised, the loop reads past the end of the array.

This was reported by KASAN:

BUG: KASAN: slab-out-of-bounds in mc_probe+0x26b3/0x2774 [snd_acp_sdw_legacy_mach] Read of size 1

Pass the allocated entry count to create_sdw_dailinks() and stop before reading past the array.

Scores

CVSSScoreVectorSource
3.18.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2981d9b0789c44b7375e7d599caf71bd843afc9e to before 1279bdab5fa1f28c168e54215db506e87c6fac1eAffected
  • 2981d9b0789c44b7375e7d599caf71bd843afc9e to before 0230471eef5902207516851dcd47c559571dded2Affected
  • 2981d9b0789c44b7375e7d599caf71bd843afc9e to before d49ecdf327cc91062d2f80996a163cf65fda1e60Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.