7.1

CVE-2026-74295

ASoC: codecs: hdac_hdmi: Validate written enum value

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: hdac_hdmi: Validate written enum value

hdac_hdmi_set_pin_port_mux() uses the written enum value to index the
texts array before calling snd_soc_dapm_put_enum_double(), which validates
that the value is within the enum item range.

An out-of-range value can therefore make the driver read past the texts
array before the helper rejects the write. Move the lookup after the helper
has accepted the value.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 4a3478debf36c0aa0cf0860daec245b13cd4448f
Version < 216336418c007c4b44c650acf2fd3d2de5bb81e8
Status affected
Version 4a3478debf36c0aa0cf0860daec245b13cd4448f
Version < bc464a6a9e352daa17b1636c090cf3185710b9a0
Status affected
Version 4a3478debf36c0aa0cf0860daec245b13cd4448f
Version < 8cbf24714d6b3f553fc959632c9781176a73a9a7
Status affected
Version 4a3478debf36c0aa0cf0860daec245b13cd4448f
Version < 7f02e9064b6f84e7f93c72f134306271eb4f7de4
Status affected
Version 4a3478debf36c0aa0cf0860daec245b13cd4448f
Version < 9131e4b023e0db5764680034bdc94aeae0b0f33d
Status affected
Version 4a3478debf36c0aa0cf0860daec245b13cd4448f
Version < d8961b5c7889b6ecc00f1409d36826df1665df27
Status affected
Version 4a3478debf36c0aa0cf0860daec245b13cd4448f
Version < 0b08baeccdcf52fad328ad645f5b4fbee04eea34
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.6
Status affected
Version 0
Version < 4.6
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.027
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/216336418c007c4b44c650acf2fd3d2de5bb81e8
https://git.kernel.org/stable/c/bc464a6a9e352daa17b1636c090cf3185710b9a0
https://git.kernel.org/stable/c/8cbf24714d6b3f553fc959632c9781176a73a9a7
https://git.kernel.org/stable/c/7f02e9064b6f84e7f93c72f134306271eb4f7de4
https://git.kernel.org/stable/c/9131e4b023e0db5764680034bdc94aeae0b0f33d
https://git.kernel.org/stable/c/d8961b5c7889b6ecc00f1409d36826df1665df27
https://git.kernel.org/stable/c/0b08baeccdcf52fad328ad645f5b4fbee04eea34