VULNERABILITY INTELLIGENCE

CVE-2026-80526

CVSS score7.8 HIGH
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-08-26
Last modified2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562_volume_control_put() does not do any validation of the control value written by userspace, it uses it to look up a value in a fixed size array which can easily be overflowed and then writes whatever value it gets back to the device. Add validation that we are loading a value we have in the array.