CVE-2026-98053

ASoC: Intel: avs: Refactor and fix init_config access

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 21, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: avs: Refactor and fix init_config access

Existing code accesses enties found in ->init_configs array through indexes that are part of ->config_ids array. Those two are limited by: ->num_init_configs and ->num_config_ids respectively. Using ID larger or equal to ->num_init_configs leads to out-of-bounds access:

avs_path_module_send_init_configs() loop: (...) &acomp->tplg->init_configs[ids[i]] ^ out-of-bounds candidate

Rather than adding another if-statement, refactor the code. There is no need to store the IDs, have a list of pointers to actual config-entries instead. As the verification of ->init_config entries does not differ from verification of other types that are part of the topology.c file, simply reuse the code.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8a49ef789b1be68242624d460df2ada8087308a7 to before 70ffcaf86a053be99daaf3b103beac0ad7136ca3Affected
  • 8a49ef789b1be68242624d460df2ada8087308a7 to before 75bd5ea9c858d89fb8862f23afb00783bf02cd7aAffected
  • 8a49ef789b1be68242624d460df2ada8087308a7 to before 8f20a0f4f7d638e83ae86db1719a24c7049762f5Affected
  • 8a49ef789b1be68242624d460df2ada8087308a7 to before 681e91035dc794896a904852040837190e5041f5Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.