Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-90196

ASoC: SOF: validate topology volume range before allocation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: validate topology volume range before allocation SOF treats the topology mixer min and max values as non-negative indices into its volume table. It stores them in signed fields, allocates max + 1 entries through an int argument, and later indexes the table with the stored range. An inverted range is invalid, while a maximum at or above INT_MAX cannot be represented safely after the increment or in the signed fields. Validate the complete range before storing it or allocating the table.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e to < 992e130b888699d18da901b593d7a0fb75041a03affected
  • 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e to < cd63a1eb677e9548ba2d512be5dac4cb474ae145affected
  • 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e to < 8e1d63f5e272061208455b5aa4cc0d5bcbe5c1a8affected
  • 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e to < d2f41287b51a3261d447ae38000f7a6f5860663aaffected
  • 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e to < 72d0b77412aef2cec554cc84e176658f2a48dafaaffected
  • 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e to < a698e4a60fa54268a38f4e66378851a196cb139baffected

Linux Linux

Default version status: affected

  • 5.2affected
  • 0 to < 5.2unaffected
  • 6.1.188 to ≤ 6.1.*unaffected
  • 6.6.157 to ≤ 6.6.*unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.52 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References