CVE-2026-72415

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SDCA: Validate written enum value in ge_put_enum_double()

ge_put_enum_double() passes the user-supplied enumeration index

item[0] to snd_soc_enum_item_to_val() without checking it against the

number of items in the enum:

ret = snd_soc_enum_item_to_val(e, item[0]);

snd_soc_enum_item_to_val() indexes the heap-allocated e->values[] array

with that index (e->values is set from a devm_kcalloc() of e->items

entries), so a control write with an out-of-range item[0] reads past the

end of the values buffer. The bounds check in

snd_soc_dapm_put_enum_double() only runs afterwards, so it does not

prevent the read here.

Reject an out-of-range item before using it, matching the other enum put

handlers.

This issue was pointed out by the Sashiko AI review bot while reviewing a

related enum-validation series:

https://lore.kernel.org/all/[email protected]/

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References