{"id":"CVE-2026-74293","revision":"49d3f2fb45524efba0326be5f1f009d8","records":[{"revision":"49d3f2fb45524efba0326be5f1f009d8","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-74293","aliases":[],"title":"ASoC: fsl: fsl_audmix: Validate written enum values","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: fsl: fsl_audmix: Validate written enum values\n\nfsl_audmix_put_mix_clk_src() and fsl_audmix_put_out_src()\nconvert the user-provided enum item with snd_soc_enum_item_to_val()\nbefore checking whether the item is within the enum's item count.\n\nThe generic snd_soc_put_enum_double() helper performs that\nvalidation, but these callbacks use the converted value first: the\nclock-source path tests it with BIT(), and the output-source path\nindexes the prms transition table with it.\n\nReject out-of-range enum items before converting them.","state":0,"publishedAt":"2026-08-15T05:57:58.889+00:00","modifiedAt":"2026-10-16T18:55:30.824+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"sound/soc/fsl/fsl_audmix.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"be1df61cf06efb355c90702e46b8d46f055acb4e\",\n                            \"lessThan\": \"7513831b90a38d55fa089e3e1b49691e467afee6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be1df61cf06efb355c90702e46b8d46f055acb4e\",\n                            \"lessThan\": \"b4774a7da12b14fc37219ab4368d1907f9b5aca4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be1df61cf06efb355c90702e46b8d46f055acb4e\",\n                            \"lessThan\": \"8fb4364eb494b926d009bfaf3c98f07c3aa5d9f3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be1df61cf06efb355c90702e46b8d46f055acb4e\",\n                            \"lessThan\": \"0b10c6203e62d9e7337cc401568b201f9bac79ec\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be1df61cf06efb355c90702e46b8d46f055acb4e\",\n                            \"lessThan\": \"b36d6d48faa6b1bb723b8f4e527c531a1a68520e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be1df61cf06efb355c90702e46b8d46f055acb4e\",\n                            \"lessThan\": \"0f1510e84d7bfc3eb9538efa65c6ea0aadf1078c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be1df61cf06efb355c90702e46b8d46f055acb4e\",\n                            \"lessThan\": \"5b7a23c1ed04e794ef3b31e452ef5c93e1e34b4a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be1df61cf06efb355c90702e46b8d46f055acb4e\",\n                            \"lessThan\": \"3cd17e4e2871114d5579fa7bc8da66faf7fc1930\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"sound/soc/fsl/fsl_audmix.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.2\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.261\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.212\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.178\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.145\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.97\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.40\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.5\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/7513831b90a38d55fa089e3e1b49691e467afee6","https://git.kernel.org/stable/c/b4774a7da12b14fc37219ab4368d1907f9b5aca4","https://git.kernel.org/stable/c/8fb4364eb494b926d009bfaf3c98f07c3aa5d9f3","https://git.kernel.org/stable/c/0b10c6203e62d9e7337cc401568b201f9bac79ec","https://git.kernel.org/stable/c/b36d6d48faa6b1bb723b8f4e527c531a1a68520e","https://git.kernel.org/stable/c/0f1510e84d7bfc3eb9538efa65c6ea0aadf1078c","https://git.kernel.org/stable/c/5b7a23c1ed04e794ef3b31e452ef5c93e1e34b4a","https://git.kernel.org/stable/c/3cd17e4e2871114d5579fa7bc8da66faf7fc1930"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-74293","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-74293","identifiers":["CVE-2026-74293"]},"retained":false,"historicalAffected":[]}],"coverage":[]}