vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-80526

ASoC: tas2562: Validate values for volume writes

HIGH
7.8
CVSS Score
Published: August 26, 2026 at 02:37 PM UTC
Updated: October 30, 2026 at 01:20 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562_volume_control_put() does not do any validation of the control value written by userspace, it uses it to look up a value in a fixed size array which can easily be overflowed and then writes whatever value it gets back to the device. Add validation that we are loading a value we have in the array.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
5.7bf726b1c86f2caab70ad614cdf7da3b81ad08e69
Vendor states this is fixed in 1f389ecd0c35e9e281036e44c121df904f3164c1 (fixed)
Vendor states this is fixed in 20bdbb1376457ecbf418bf677fd285820d1fc011 (fixed)
Vendor states this is fixed in 8fb41964f7e4e4207c8999af2056894caa7a252a (fixed)
Vendor states this is fixed in c37a0461c0d0a70c5de4fdbd70449a7f53c12dda (fixed)
Vendor states this is fixed in db488d653d896fcf9ac87e15239924c2928bbc3c (fixed)
Vendor states this is fixed in 5.7 (unaffected)
Vendor states this is fixed in 6.1.191 (unaffected)
Vendor states this is fixed in 6.12.105 (unaffected)
Vendor states this is fixed in 6.18.46 (unaffected)
Vendor states this is fixed in 6.6.153 (unaffected)
Vendor states this is fixed in 7.1.10 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (6)

Source: cverecord
https://git.kernel.org/stable/c/1f389ecd0c35e9e281036e44c121df904f3164c1
Source: cverecord
https://git.kernel.org/stable/c/20bdbb1376457ecbf418bf677fd285820d1fc011
Source: cverecord
https://git.kernel.org/stable/c/db488d653d896fcf9ac87e15239924c2928bbc3c
Source: cverecord
https://git.kernel.org/stable/c/c37a0461c0d0a70c5de4fdbd70449a7f53c12dda
Source: cverecord
https://git.kernel.org/stable/c/8fb41964f7e4e4207c8999af2056894caa7a252a
Source: cverecord
https://git.kernel.org/stable/c/602b209a5cfcf8e891afba12fad109db4141d4b8

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card