AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72303

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel's ASoC subsystem allows for improper validation of the MODULE_NOTIFICATION payload size, which could lead to potential memory corruption or denial of service when handling control updates. Organizations utilizing affected Linux distributions, particularly those relying on the SOF (Sound Open Firmware) framework, should prioritize patching this issue to mitigate risks associated with unvalidated input handling.

CVE
CVE-2026-72303
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Validate notification payload size Validate MODULE_NOTIFICATION payload length before reading bytes/channel data in control update handling.