CVE-2026-80526

Received Received - Intake

BaseFortify

Publication date: 2026-08-26

Last updated on: 2026-08-27

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562_volume_control_put() does not do any validation of the control value written by userspace, it uses it to look up a value in a fixed size array which can easily be overflowed and then writes whatever value it gets back to the device. Add validation that we are loading a value we have in the array.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-26

Last Modified

2026-08-27

Generated

2026-10-19

AI Q&A

2026-08-26

EPSS Evaluated

2026-10-18

NVD

CVE-2026-80526

EUVD

EUVD-2026-66592

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	bf726b1c86f2caab70ad614cdf7da3b81ad08e69
Linux	Linux	bf726b1c86f2caab70ad614cdf7da3b81ad08e69
Linux	Linux	bf726b1c86f2caab70ad614cdf7da3b81ad08e69
Linux	Linux	bf726b1c86f2caab70ad614cdf7da3b81ad08e69
Linux	Linux	bf726b1c86f2caab70ad614cdf7da3b81ad08e69
Linux	Linux	5.7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's ASoC subsystem, specifically in the tas2562 audio codec driver. The issue is in the tas2562_volume_control_put() function, which fails to validate user-provided volume control values before using them to index a fixed-size array. This can lead to an array overflow, allowing arbitrary values to be written to the device.

Detection Guidance

This vulnerability can be detected by checking if the Linux kernel version is affected. Use the command 'uname -r' to check the kernel version. If it is a version prior to the patched release, the system is vulnerable.

Impact Analysis

An attacker with access to the system could exploit this flaw to corrupt kernel memory or cause unexpected behavior in the audio subsystem. This might result in system instability, crashes, or potentially privilege escalation if combined with other vulnerabilities.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it involves a low-level kernel driver (ASoC: tas2562) for audio devices. The issue is limited to potential memory corruption in volume control, which does not inherently impact data protection or privacy requirements.

Mitigation Strategies

Immediately update the Linux kernel to the latest patched version. Use your package manager to apply updates, e.g., 'sudo apt update && sudo apt upgrade' for Debian-based systems or 'sudo yum update' for RHEL-based systems.

Hi! I’m here to help you understand CVE-2026-80526. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70