Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-72302

ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc In sof_ipc3_control_update(), the expected_size calculation uses firmware-provided cdata->num_elems in arithmetic that could overflow on 32-bit platforms, wrapping to a small value. This would allow the cdata->rhdr.hdr.size comparison to pass with mismatched sizes, potentially leading to out-of-bounds access in snd_sof_update_control. Use check_mul_overflow() and check_add_overflow() to detect and reject overflowed size calculations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 10f461d79c2d1afb22344986cc1b4631169cf25e to < 6856b3c23b0995eefad5a6142b4365ef70e1fe4aaffected
  • 10f461d79c2d1afb22344986cc1b4631169cf25e to < 89a2309a9eec80d4c19e3aed62c4f923594d1911affected
  • 10f461d79c2d1afb22344986cc1b4631169cf25e to < ffd79e77f2fbacd7a5d40ad1d4c7f3f089a8f2f3affected
  • 10f461d79c2d1afb22344986cc1b4631169cf25e to < 711d912b18763af62a63aa8f2419a774eb63bba4affected
  • 10f461d79c2d1afb22344986cc1b4631169cf25e to < 312c7d2ebe696da3f885eee77d52297664e57c53affected
  • 10f461d79c2d1afb22344986cc1b4631169cf25e to < 8791977d7289f6e9d2b014f60a5455f053a7bc04affected

Linux Linux

Default version status: affected

  • 5.18affected
  • 0 to < 5.18unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References