CVE-2026-64041
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
30/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ASoC: codecs: fs210x: fix possible buffer overflow<br />
<br />
In fs210x_effect_scene_info(), a string was copied like this:<br />
<br />
strscpy(DST, SRC, strlen(SRC) + 1);<br />
<br />
A buffer overflow would happen if strlen(SRC) >= sizeof(DST).<br />
Actually, strscpy() must be used this way:<br />
<br />
strscpy(DST, SRC, sizeof(DST));<br />
strscpy(DST, SRC); // defaults to sizeof(DST)
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH