CVE-2026-74291
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
ASoC: topology: Check PCM and DAI name strings before use
Topology objects store several PCM and DAI names in fixed-size UAPI arrays. Other topology parser paths validate these fields with bounded strnlen() checks before using them as C strings, but the PCM and DAI paths still pass some fixed-size arrays directly to strlen(), devm_kstrdup(), DAI lookup, and diagnostic prints.
A malformed topology blob with a non-NUL-terminated PCM, DAI, or stream capability name can therefore make the parser read past the end of the fixed-size field.
Reject unterminated PCM and DAI name fields before consuming them as C strings.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 64527e8a352968bda529f01df1c9dd5fe581ff04 < ba37b62ed0a443b8e23f53a7477e7f2537fd34c7 | affected |
| Linux | Linux | 64527e8a352968bda529f01df1c9dd5fe581ff04 < b7e44d1986d6671342c19b82192189ca5db5dab7 | affected |
| Linux | Linux | 4.6 | affected |
| Linux | Linux | 0 < 4.6 | unaffected |
| Linux | Linux | 7.1.5 <= 7.1.* | unaffected |
| Linux | Linux | 7.2 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/ba37b62ed0a443b8e23f53a7477e7f2537fd34c7
- https://git.kernel.org/stable/c/b7e44d1986d6671342c19b82192189ca5db5dab7
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.