In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
In snd_sof_update_control(), firmware-provided cdata->num_elems is checked against local_cdata->data->size but never against the actual allocation size. If local_cdata->data->size was previously set to an inconsistent value, the memcpy could write past the allocated buffer.
Add a bounds check to ensure num_elems fits within the available space in the ipc_control_data allocation before copying.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-coreUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-develUpgrade kernel-64k-modules-extraUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-debug-develUpgrade perfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-core | Oct 11, 2026 | Sep 23, 2026 |
| Debian | — | Upgrade linux | Aug 16, 2026 | Aug 16, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 22, 2026 | Aug 15, 2026 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 20, 2026 | Aug 15, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade rtlaUpgrade kernel-debuginfoUpgrade kernel-rt-modules-extraUpgrade libperf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-toolsUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-uki-virtUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-devel-matchedUpgrade kernel-debugUpgrade kernel-coreUpgrade perf-debuginfoUpgrade libperfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade rvUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-devel-matched | Sep 28, 2026 | Sep 25, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1052-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-147-lowlatencyUpgrade linux-image-6.8.0-1036-nvidia-tegra-rtUpgrade linux-image-6.8.0-1066-gkeUpgrade linux-image-virtual-7.0Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-6.8.0-1071-gcpUpgrade linux-image-6.8.0-1071-gcp-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-147-lowlatency-64kUpgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-realtime-64kUpgrade linux-image-6.8.0-1067-aws-fipsUpgrade linux-image-oem-26.04aUpgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1069-azure-fdeUpgrade linux-image-6.8.0-147-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1071-azure-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-6.8.0-1071-gcp-fipsUpgrade linux-image-awsUpgrade linux-image-aws-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-6.8.0-1036-nvidia-tegraUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-realtime-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-6.8.0-147-genericUpgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-aws-fipsUpgrade linux-image-gke-7.0Upgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-7.0.0-1017-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-generic-7.0Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-oem-7.0Upgrade linux-image-virtualUpgrade linux-image-laptop-23.10Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1071-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-147-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1067-ibmUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oracle-7.0Upgrade linux-image-azureUpgrade linux-image-7.0.0-1015-oemUpgrade linux-image-ibm-classicUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1067-aws-64kUpgrade linux-image-6.8.0-1064-oracle-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.1-1062-realtimeUpgrade linux-image-oem-26.04Upgrade linux-image-ibm-7.0Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-gkeopUpgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-6.8.0-1066-gke-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fde-7.0Upgrade linux-image-gke-6.8Upgrade linux-image-genericUpgrade linux-image-gke-64k-7.0Upgrade linux-image-gke-64kUpgrade linux-image-gcp-7.0Upgrade linux-image-azure-lts-26.04Upgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-7.0.0-1014-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-7.0.0-38-genericUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1067-awsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-6.8.0-1064-oracleUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 21, 2026 | Aug 15, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub