Riskcovery

CVE-2026-80526

ASoC: tas2562: Validate values for volume writes

State
Published
Severity
7.8 High
Published
Aug 26, 2026
Updated
Oct 30, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: tas2562: Validate values for volume writes

tas2562_volume_control_put() does not do any validation of the control value written by userspace, it uses it to look up a value in a fixed size array which can easily be overflowed and then writes whatever value it gets back to the device. Add validation that we are loading a value we have in the array.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • bf726b1c86f2caab70ad614cdf7da3b81ad08e69 to before 602b209a5cfcf8e891afba12fad109db4141d4b8Affected
  • bf726b1c86f2caab70ad614cdf7da3b81ad08e69 to before 1f389ecd0c35e9e281036e44c121df904f3164c1Affected
  • bf726b1c86f2caab70ad614cdf7da3b81ad08e69 to before 20bdbb1376457ecbf418bf677fd285820d1fc011Affected
  • bf726b1c86f2caab70ad614cdf7da3b81ad08e69 to before db488d653d896fcf9ac87e15239924c2928bbc3cAffected
  • bf726b1c86f2caab70ad614cdf7da3b81ad08e69 to before c37a0461c0d0a70c5de4fdbd70449a7f53c12ddaAffected
  • bf726b1c86f2caab70ad614cdf7da3b81ad08e69 to before 8fb41964f7e4e4207c8999af2056894caa7a252aAffected
LinuxLinux
  • 5.7Affected
  • before 5.7Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.153 through 6.6.*Not affected
  • 6.12.105 through 6.12.*Not affected
  • 6.18.46 through 6.18.*Not affected
  • 7.1.10 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.