{"id":"CVE-2026-74332","revision":"6116410e3d524beb9b2ea70d67dee55f","records":[{"revision":"6116410e3d524beb9b2ea70d67dee55f","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-74332","aliases":[],"title":"ASoC: amd: acp-sdw-sof: Bound DAI link iteration","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: amd: acp-sdw-sof: Bound DAI link iteration\n\ncreate_sdw_dailinks() walks sof_dais until it finds an entry with\ninitialised cleared, but sof_dais is allocated with exactly num_ends\nentries. If all entries are initialised, the loop reads past the end of\nthe array.\n\nPass the allocated entry count to create_sdw_dailinks() and stop before\nreading past the array.","state":0,"publishedAt":"2026-08-15T05:58:25.112+00:00","modifiedAt":"2026-10-16T18:55:33.526+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"sound/soc/amd/acp/acp-sdw-sof-mach.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6d8348ddc56ed43ba39d1e8adda13299201f32ed\",\n                            \"lessThan\": \"0a5ff4000dd7a390139dd7823fef1de4963e490a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6d8348ddc56ed43ba39d1e8adda13299201f32ed\",\n                            \"lessThan\": \"9e82497138abea7d5c6e65015663d907fbcbf6b4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6d8348ddc56ed43ba39d1e8adda13299201f32ed\",\n                            \"lessThan\": \"86a64c049873fe4d4a6a378e27a333ab5631c4b2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6d8348ddc56ed43ba39d1e8adda13299201f32ed\",\n                            \"lessThan\": \"4d992e63f52d58f52b724606c60ae7b37a1c582f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"sound/soc/amd/acp/acp-sdw-sof-mach.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.12\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.12\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.97\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.40\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.5\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.4,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/0a5ff4000dd7a390139dd7823fef1de4963e490a","https://git.kernel.org/stable/c/9e82497138abea7d5c6e65015663d907fbcbf6b4","https://git.kernel.org/stable/c/86a64c049873fe4d4a6a378e27a333ab5631c4b2","https://git.kernel.org/stable/c/4d992e63f52d58f52b724606c60ae7b37a1c582f"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-74332","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-74332","identifiers":["CVE-2026-74332"]},"retained":false,"historicalAffected":[]}],"coverage":[]}