CVE-2026-80526 PUBLISHED

ASoC: tas2562: Validate values for volume writes

Assigner: Linux
Reserved: 26.08.2026 Published: 26.08.2026 Updated: 26.08.2026

In the Linux kernel, the following vulnerability has been resolved:

ASoC: tas2562: Validate values for volume writes

tas2562_volume_control_put() does not do any validation of the control value written by userspace, it uses it to look up a value in a fixed size array which can easily be overflowed and then writes whatever value it gets back to the device. Add validation that we are loading a value we have in the array.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 1f389ecd0c35e9e281036e44c121df904f3164c1 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 20bdbb1376457ecbf418bf677fd285820d1fc011 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to db488d653d896fcf9ac87e15239924c2928bbc3c (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to c37a0461c0d0a70c5de4fdbd70449a7f53c12dda (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 8fb41964f7e4e4207c8999af2056894caa7a252a (excl.)
  • affected from 0 to 6.6.153 (excl.)
  • affected from 0 to 6.12.105 (excl.)
  • affected from 0 to 6.18.46 (excl.)
  • affected from 0 to 7.1.10 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • unaffected from 6.6.153 to 6.6.* (incl.)
  • unaffected from 6.12.105 to 6.12.* (incl.)
  • unaffected from 6.18.46 to 6.18.* (incl.)
  • unaffected from 7.1.10 to 7.1.* (incl.)
  • unaffected from 7.2 to * (incl.)

References