CVE-2026-74293
Received Received - Intake

Integer Overflow in Linux Kernel ASoC fsl_audmix Driver

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fsl_audmix: Validate written enum values fsl_audmix_put_mix_clk_src() and fsl_audmix_put_out_src() convert the user-provided enum item with snd_soc_enum_item_to_val() before checking whether the item is within the enum's item count. The generic snd_soc_put_enum_double() helper performs that validation, but these callbacks use the converted value first: the clock-source path tests it with BIT(), and the output-source path indexes the prms transition table with it. Reject out-of-range enum items before converting them.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74293
EUVD
EUVD-2026-59440

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper validation of user-provided enum values in the fsl_audmix driver. The functions fsl_audmix_put_mix_clk_src() and fsl_audmix_put_out_src() convert enum values before checking if they are within the valid range. This can lead to out-of-bounds access or incorrect behavior.

Detection Guidance

This vulnerability is specific to the Linux kernel's ASoC fsl_audmix driver. Detection requires checking the kernel version and verifying if the vulnerable code paths exist in the driver. Use uname -a to check the kernel version and grep for the vulnerable functions in the kernel source or running system.

Impact Analysis

This vulnerability could allow an attacker with local access to cause undefined behavior, crashes, or potential privilege escalation in the Linux kernel. It may also lead to denial-of-service conditions or data corruption.

Mitigation Strategies

Apply the latest kernel update provided by your Linux distribution to patch this vulnerability. If an update is not immediately available, consider disabling the fsl_audmix driver if not in use or restrict access to the affected device nodes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74293. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart