{"id":"CVE-2026-64243","revision":"a1e3fcf2f9544a2b834ddd344bf9bbe2","records":[{"revision":"a1e3fcf2f9544a2b834ddd344bf9bbe2","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-64243","aliases":[],"title":"ASoC: codecs: simple-mux: Fix enum control bounds check","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: simple-mux: Fix enum control bounds check\n\nsimple_mux_control_put() rejects values greater than e->items, but\nenum control values are zero based. For the two-entry mux used by this\ndriver, valid values are 0 and 1, so value 2 must be rejected as well.\n\nAccepting e->items can store an invalid mux state, pass it to the GPIO\nsetter, and pass it on to the DAPM mux update path where it is used as\nan index into the enum text array.\n\nUse the same >= e->items check used by the ASoC enum helpers.","state":0,"publishedAt":"2026-07-24T15:27:45.311+00:00","modifiedAt":"2026-10-19T20:28:16.341+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"sound/soc/codecs/simple-mux.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"342fbb7578d1741ff646d7b08e14e8753267b9fa\",\n                            \"lessThan\": \"6fb653b62f169f6050fac45b56bf21ad097e19f6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"342fbb7578d1741ff646d7b08e14e8753267b9fa\",\n                            \"lessThan\": \"d8cc3e747b002a8b965c529de79c0654675b9a1a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"342fbb7578d1741ff646d7b08e14e8753267b9fa\",\n                            \"lessThan\": \"5fe860af8630cf7c78523cbd68e5a234743585aa\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"342fbb7578d1741ff646d7b08e14e8753267b9fa\",\n                            \"lessThan\": \"2ff3ac6f7664fe5639cad01712ac5e021fa7939c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"342fbb7578d1741ff646d7b08e14e8753267b9fa\",\n                            \"lessThan\": \"164dcbec9632ca93ae313e6da6e4e05584fa0f02\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"342fbb7578d1741ff646d7b08e14e8753267b9fa\",\n                            \"lessThan\": \"05ef77f02607a3dc5d7f9762cb990f76843315d4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"342fbb7578d1741ff646d7b08e14e8753267b9fa\",\n                            \"lessThan\": \"f63ad68e18d774a5d15cd7e405ead63f6b322679\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"sound/soc/codecs/simple-mux.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.11\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.11\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.210\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.176\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.143\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.93\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.35\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.0.12\",\n                            \"lessThanOrEqual\": \"7.0.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","score":7.1,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/6fb653b62f169f6050fac45b56bf21ad097e19f6","https://git.kernel.org/stable/c/d8cc3e747b002a8b965c529de79c0654675b9a1a","https://git.kernel.org/stable/c/5fe860af8630cf7c78523cbd68e5a234743585aa","https://git.kernel.org/stable/c/2ff3ac6f7664fe5639cad01712ac5e021fa7939c","https://git.kernel.org/stable/c/164dcbec9632ca93ae313e6da6e4e05584fa0f02","https://git.kernel.org/stable/c/05ef77f02607a3dc5d7f9762cb990f76843315d4","https://git.kernel.org/stable/c/f63ad68e18d774a5d15cd7e405ead63f6b322679"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-64243","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-64243","identifiers":["CVE-2026-64243"]},"retained":false,"historicalAffected":[]}],"coverage":[]}