CVE-2026-80910

ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses

N/A
Published: September 4, 2026 at 05:19 PM UTC
Updated: September 4, 2026 at 06:36 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four "WSA RX* Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol->value.integer.value[0] (a long) instead of ucontrol->value.enumerated.item[0] (an unsigned int). This same pattern was fixed in the sibling drivers by commit bcfe5f76cc40 ("ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type") and commit 0ea5eff7c606 ("ASoC: codecs: va-macro: fix accessing array out of bounds for enum type"), but wsa-macro was missed. On 64-bit kernels with CONFIG_SND_CTL_DEBUG this trips the elem value sanity check and every read of these controls fails with -EINVAL.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.11 ≤ v < 5.15.2175.11 ≤ v < 6.1.1845.11 ≤ v < 6.12.1055.11 ≤ v < 6.18.465.11 ≤ v < 6.6.1535.11 ≤ v < 7.1.105.11 ≤ v < 7.25.11809bcbcecebff86003e13f07444d21b9d6652a64
Vendor states this is fixed in 2fe7a89b2b5b73be35c1e493d0246314ba54e427 (fixed)
Vendor states this is fixed in 4bcac4bf304a3ec746192e49a669c236aaf27dbf (fixed)
Vendor states this is fixed in 524aa7b9954b0a43dd13f71ecbbac52a151c326d (fixed)
Vendor states this is fixed in 56f24311fd5607588a47e44675195a9efb200f29 (fixed)
Vendor states this is fixed in 7bcdde412e6c744f6135e02b12a735e2e37b639f (fixed)
Vendor states this is fixed in 891129df5de79cd533ae335c6eab24df2ff2b0fd (fixed)
Vendor states this is fixed in bd4e5f9c3b764dc0e2a5662f92d63d2f3767a78d (fixed)
Vendor states this is fixed in 5.11 (unaffected)
Vendor states this is fixed in 5.15.217 (unaffected)
Vendor states this is fixed in 6.1.184 (unaffected)
Vendor states this is fixed in 6.12.105 (unaffected)
Vendor states this is fixed in 6.18.46 (unaffected)
Vendor states this is fixed in 6.6.153 (unaffected)
Vendor states this is fixed in 7.1.10 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card