Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-72303

ASoC: SOF: ipc4-control: Validate notification payload size

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Validate notification payload size Validate MODULE_NOTIFICATION payload length before reading bytes/channel data in control update handling.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2a28b5240f2b328495c6565d277f438dbc583d61 to < c29f5b4498894aebb2f87b1a29bb320e2f9348f9affected
  • 2a28b5240f2b328495c6565d277f438dbc583d61 to < 5bdfeccb7fbf6e000fc783cd8412732e67c1ad0caffected

Linux Linux

Default version status: affected

  • 7.0affected
  • 0 to < 7.0unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References