CVE-2026-80526
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
41/100
Published: 2026-08-26
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562_volume_control_put() does not do any validation of the control value written by userspace, it uses it to look up a value in a fixed size array which can easily be overflowed and then writes whatever value it gets back to the device. Add validation that we are loading a value we have in the array.
Affected Software (7)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 602b209a5cfcf8e891afba12fad109db4141d4b8 |
| Linux | Linux | bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 1f389ecd0c35e9e281036e44c121df904f3164c1 |
| Linux | Linux | bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 20bdbb1376457ecbf418bf677fd285820d1fc011 |
| Linux | Linux | bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < db488d653d896fcf9ac87e15239924c2928bbc3c |
| Linux | Linux | bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < c37a0461c0d0a70c5de4fdbd70449a7f53c12dda |
| Linux | Linux | bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 8fb41964f7e4e4207c8999af2056894caa7a252a |
| Linux | Linux | 5.7 |