CVE-2026-80910
Received Received - Intake

ASoC Codec Enum Access Flaw in Linux Kernel

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four "WSA RX* Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol->value.integer.value[0] (a long) instead of ucontrol->value.enumerated.item[0] (an unsigned int). This same pattern was fixed in the sibling drivers by commit bcfe5f76cc40 ("ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type") and commit 0ea5eff7c606 ("ASoC: codecs: va-macro: fix accessing array out of bounds for enum type"), but wsa-macro was missed. On 64-bit kernels with CONFIG_SND_CTL_DEBUG this trips the elem value sanity check and every read of these controls fails with -EINVAL.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-05
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80910
EUVD
EUVD-2026-71669

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability in the ASoC (ALSA System on Chip) codec driver lpass-wsa-macro. It involves incorrect access of enumerated controls in the sound subsystem. The get and put callbacks for certain controls use integer.value[0] instead of enumerated.item[0], causing array out-of-bounds access.

Detection Guidance

This vulnerability is specific to the Linux kernel's ASoC codec drivers and may not have direct network detection methods. Check kernel logs for errors related to 'lpass-wsa-macro' or sound control failures. Use 'dmesg | grep -i lpass' or 'journalctl -k | grep -i lpass' to identify issues.

Impact Analysis

On 64-bit Linux systems with CONFIG_SND_CTL_DEBUG enabled, this flaw causes sound control reads to fail with -EINVAL. Users may experience sound control malfunctions or errors when adjusting speaker gain or input mux settings.

Mitigation Strategies

Update the Linux kernel to a patched version where this issue is resolved. Monitor kernel updates from your distribution or apply patches addressing 'lpass-wsa-macro' enum control fixes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80910. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart