CVE-2026-80526 — ASoC: tas2562: Validate values for volume writes
In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562_volume_control_put() does not do any validation of…
Published: 2026-08-26 · CVSS: 7.8 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562_volume_control_put() does not do any validation of the control value written by userspace, it uses it to look up a value in a fixed size array which can easily be overflowed and then writes whatever value it gets back to the device. Add validation that we are loading a value we have in the array.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7