Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-80583

Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
26/08/2026
Última modificación:
27/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses<br /> <br /> The "DEC0 MODE" to "DEC7 MODE" controls are enumerated, but<br /> tx_macro_dec_mode_get() and tx_macro_dec_mode_put() access their<br /> value through ucontrol-&gt;value.integer.value[0] (a long) instead of<br /> ucontrol-&gt;value.enumerated.item[0] (an unsigned int).<br /> <br /> This same pattern was fixed in the sibling drivers by<br /> commit bcfe5f76cc40 ("ASoC: codecs: rx-macro: fix accessing array<br /> out of bounds for enum type") and<br /> commit 0ea5eff7c606 ("ASoC: codecs: va-macro: fix accessing array<br /> out of bounds for enum type"), but tx-macro was missed.<br /> <br /> On 64-bit kernels built with CONFIG_SND_CTL_DEBUG, the elem value<br /> sanity check catches the 4 bytes written past the enumerated item<br /> and every read of these controls fails with -EINVAL:<br /> <br /> snd-sm8250 sound: control 2:0:0:DEC0 MODE:0: access overflow