CVE-2026-80910

ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses

State: Published
Severity: Not scored
Published: Sep 4, 2026
Updated: Sep 4, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses

EAR SPKR PA Gain" and the four "WSA RX* Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol->value.integer.value[0] (a long) instead of ucontrol->value.enumerated.item[0] (an unsigned int).

This same pattern was fixed in the sibling drivers by commit bcfe5f76cc40 ("ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type") and commit 0ea5eff7c606 ("ASoC: codecs: va-macro: fix accessing array out of bounds for enum type"), but wsa-macro was missed.

On 64-bit kernels with CONFIG_SND_CTL_DEBUG this trips the elem value sanity check and every read of these controls fails with -EINVAL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	809bcbcecebff86003e13f07444d21b9d6652a64 to before bd4e5f9c3b764dc0e2a5662f92d63d2f3767a78dAffected 809bcbcecebff86003e13f07444d21b9d6652a64 to before 4bcac4bf304a3ec746192e49a669c236aaf27dbfAffected 809bcbcecebff86003e13f07444d21b9d6652a64 to before 891129df5de79cd533ae335c6eab24df2ff2b0fdAffected 809bcbcecebff86003e13f07444d21b9d6652a64 to before 524aa7b9954b0a43dd13f71ecbbac52a151c326dAffected 809bcbcecebff86003e13f07444d21b9d6652a64 to before 2fe7a89b2b5b73be35c1e493d0246314ba54e427Affected 809bcbcecebff86003e13f07444d21b9d6652a64 to before 7bcdde412e6c744f6135e02b12a735e2e37b639fAffected 809bcbcecebff86003e13f07444d21b9d6652a64 to before 56f24311fd5607588a47e44675195a9efb200f29Affected
LinuxLinux	5.11Affected before 5.11Not affected 5.15.217 through 5.15.Not affected 6.1.184 through 6.1.Not affected 6.6.153 through 6.6.Not affected 6.12.105 through 6.12.Not affected 6.18.46 through 6.18.Not affected 7.1.10 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

809bcbcecebff86003e13f07444d21b9d6652a64 to before bd4e5f9c3b764dc0e2a5662f92d63d2f3767a78dAffected
809bcbcecebff86003e13f07444d21b9d6652a64 to before 4bcac4bf304a3ec746192e49a669c236aaf27dbfAffected
809bcbcecebff86003e13f07444d21b9d6652a64 to before 891129df5de79cd533ae335c6eab24df2ff2b0fdAffected
809bcbcecebff86003e13f07444d21b9d6652a64 to before 524aa7b9954b0a43dd13f71ecbbac52a151c326dAffected
809bcbcecebff86003e13f07444d21b9d6652a64 to before 2fe7a89b2b5b73be35c1e493d0246314ba54e427Affected
809bcbcecebff86003e13f07444d21b9d6652a64 to before 7bcdde412e6c744f6135e02b12a735e2e37b639fAffected
809bcbcecebff86003e13f07444d21b9d6652a64 to before 56f24311fd5607588a47e44675195a9efb200f29Affected

LinuxLinux

5.11Affected
before 5.11Not affected
5.15.217 through 5.15.*Not affected
6.1.184 through 6.1.*Not affected
6.6.153 through 6.6.*Not affected
6.12.105 through 6.12.*Not affected
6.18.46 through 6.18.*Not affected
7.1.10 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.