SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-80910

UNKNOWN · CVSS N/A EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-09-04 · Last synced 2026-09-19

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's ASoC (ALSA System on Chip) subsystem, specifically within the lpass-wsa-macro codec driver, where incorrect access patterns for enumerated control values can lead to read failures due to a type mismatch. This issue can cause the controls to return an error during operation, impacting audio functionality on affected systems. Organizations using 64-bit Linux kernels with CONFIG_SND_CTL_DEBUG enabled should prioritize addressing this vulnerability to ensure proper audio control functionality.

CVE
CVE-2026-80910
Severity
UNKNOWN
CVSS
N/A
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four "WSA RX* Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol->value.integer.value[0] (a long) instead of ucontrol->value.enumerated.item[0] (an unsigned int). This same pattern was fixed in the sibling drivers by commit bcfe5f76cc40 ("ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type") and commit 0ea5eff7c606 ("ASoC: codecs: va-macro: fix accessing array out of bounds for enum type"), but wsa-macro was missed. On 64-bit kernels with CONFIG_SND_CTL_DEBUG this trips the elem value sanity check and every read of these controls fails with -EINVAL.