CVE-2026-80900

Received Received - Intake

ASoC SDCA UMP Message Size Validation Bypass

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Make UMP message size check more robust If message offset was larger than the buffer length the size check will pass incorrectly. Refactor the check such that it is more robust to invalid sizes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-04

Last Modified

2026-09-04

Generated

2026-09-05

AI Q&A

2026-09-05

EPSS Evaluated

N/A

NVD

CVE-2026-80900

EUVD

EUVD-2026-71650

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a flawed size check in the ASoC SDCA UMP message handling. When the message offset exceeds the buffer length, the check incorrectly passes, allowing potential buffer overflow or corruption. The fix refactors the check to properly validate sizes.

Detection Guidance

This vulnerability is specific to the Linux kernel's ASoC SDCA component. Detection requires checking the kernel version and verifying if the affected code path is present. Use commands like 'uname -a' to check the kernel version and 'grep' to inspect the ASoC SDCA code in the kernel source.

Impact Analysis

This vulnerability could allow an attacker to cause memory corruption or crashes by sending malformed audio messages. If exploited, it may lead to denial of service or privilege escalation in systems using the affected Linux kernel components.

Mitigation Strategies

Apply the latest kernel update provided by your Linux distribution to patch the vulnerability. If an update is not immediately available, consider disabling the ASoC SDCA functionality or restricting access to audio devices as a temporary workaround.

Hi! I’m here to help you understand CVE-2026-80900. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70