CVE-2026-90196
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
ASoC: SOF: validate topology volume range before allocation
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: validate topology volume range before allocation SOF treats the topology mixer min and max values as non-negative indices into its volume table. It stores them in signed fields, allocates max + 1 entries through an int argument, and later indexes the table with the stored range. An inverted range is invalid, while a maximum at or above INT_MAX cannot be represented safely after the increment or in the signed fields. Validate the complete range before storing it or allocating the table.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e | affected | git | 992e130b888699d18da901b593d7a0fb75041a03 | Unavailable | None listed |
| 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e | affected | git | cd63a1eb677e9548ba2d512be5dac4cb474ae145 | Unavailable | None listed |
| 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e | affected | git | 8e1d63f5e272061208455b5aa4cc0d5bcbe5c1a8 | Unavailable | None listed |
| 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e | affected | git | d2f41287b51a3261d447ae38000f7a6f5860663a | Unavailable | None listed |
| 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e | affected | git | 72d0b77412aef2cec554cc84e176658f2a48dafa | Unavailable | None listed |
| 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e | affected | git | a698e4a60fa54268a38f4e66378851a196cb139b | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.2 | Unavailable | None listed |
| 6.1.188 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.157 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.110 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.52 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.2.6 | unaffected | semver | Unavailable | 7.2.* | None listed |
| 7.3 | unaffected | original_commit_for_fix | Unavailable | * | None listed |