CVE-2026-72304

Received Received - Intake

Linux kernel TOCTOU in SOF IPC4 Control

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put In sof_ipc4_bytes_put(), the copy size is derived from the old data->size in the buffer rather than the incoming new data's size field from ucontrol. If the new data has a different size, the copy uses the wrong length: it may truncate valid data or copy stale bytes. Fix by validating and using the incoming data's sof_abi_hdr.size from ucontrol before copying.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72304

EUVD

EUVD-2026-59203

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a Time-of-Check to Time-of-Use (TOCTOU) issue in the Linux kernel's ASoC SOF IPC4 control component. It occurs in the sof_ipc4_bytes_put function where the copy size is incorrectly taken from old buffer data instead of the incoming new data's size field. This can lead to copying the wrong amount of data, either truncating valid data or including stale bytes.

Detection Guidance

This vulnerability is specific to the Linux kernel's ASoC SOF IPC4 control module. Detection requires checking kernel logs for related errors or examining the sof_ipc4_bytes_put function in the kernel source code. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could allow an attacker to manipulate data by causing incorrect copying of audio control data in the Linux kernel. If exploited, it might lead to unexpected behavior in audio processing, potential crashes, or unauthorized access to sensitive system data depending on the affected system's configuration.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level kernel memory handling issue in the ASoC subsystem that could lead to data corruption or information exposure if exploited. However, no evidence suggests it impacts regulatory compliance frameworks.

Mitigation Strategies

Apply the latest Linux kernel security patches that include the fix for this issue. Update your system to a kernel version that resolves CVE-2026-72304. Monitor kernel logs for signs of exploitation after patching.

Hi! I’m here to help you understand CVE-2026-72304. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70