CVE-2026-74293
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
In the Linux kernel, the ASoC driver for Freescale fsl_audmix has functions fsl_audmix_put_mix_clk_src() and fsl_audmix_put_out_src() that convert the user-provided enum value before checking if it is within range. This can lead to incorrect memory access or errors.
Risk Assessment
Invalid values may cause incorrect behavior of the audio mixer, potentially leading to crashes or misconfiguration.
Recommendation
Apply the Linux kernel patch that rejects out-of-range values before conversion.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fsl_audmix: Validate written enum values fsl_audmix_put_mix_clk_src() and fsl_audmix_put_out_src() convert the user-provided enum item with snd_soc_enum_item_to_val() before checking whether the item is within the enum's item count. The generic snd_soc_put_enum_double() helper performs that validation, but these callbacks use the converted value first: the clock-source path tests it with BIT(), and the output-source path indexes the prms transition table with it. Reject out-of-range enum items before converting them.