CVE-2026-72301

Received Received - Intake

Time-of-Check Time-of-Use in Linux Kernel ASoC SOF

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get In sof_ipc3_bytes_put(), the size used for the memcpy is derived from the old data->size already in the buffer, not the incoming new data's size field. If the new data has a different size, the copy length is wrong: it may truncate valid data or copy stale bytes. Similarly, sof_ipc3_bytes_get() checks data->size against max_size without accounting for the sizeof(struct sof_ipc_ctrl_data) offset of the flex array within the allocation. Fix bytes_put to validate and use the incoming data's sof_abi_hdr.size from ucontrol before copying. Fix bytes_get to subtract sizeof(*cdata) from the bounds check to match the actual available space.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72301

EUVD

EUVD-2026-59200

Affected Vendors & Products

Vendor	Product	Version / Range
sof	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a time-of-check to time-of-use (TOCTOU) issue in the ASoC SOF IPC3 control functions. Specifically, it affects bytes_put and bytes_get operations where the size for memory operations is incorrectly derived from old data instead of new data, leading to potential data truncation or inclusion of stale bytes.

Detection Guidance

This vulnerability is specific to the Linux kernel's ASoC SOF (Sound Open Firmware) IPC3 control component. Detection requires checking the kernel version and SOF driver for the affected code paths. Use commands like 'uname -a' to check kernel version and 'dmesg | grep sof' to inspect SOF-related logs for errors or crashes.

Impact Analysis

This vulnerability could allow an attacker to manipulate memory operations in the Linux kernel's sound subsystem, potentially causing crashes, data corruption, or unauthorized access. It may affect systems using the SOF (Sound Open Firmware) driver.

Compliance Impact

This vulnerability is a memory corruption issue in the Linux kernel's ASoC subsystem that could lead to buffer overflows or data corruption during IPC operations. While it does not directly impact GDPR or HIPAA compliance, such low-level memory issues could potentially compromise data integrity or confidentiality if exploited, indirectly affecting compliance with security requirements in these standards.

Mitigation Strategies

Apply the latest kernel update that includes the fix for CVE-2026-72301. If a patch is unavailable, disable the SOF IPC3 control functionality or restrict access to the affected components until the update is applied.

Hi! I’m here to help you understand CVE-2026-72301. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70