In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: simple-mux: Fix enum control bounds check
simple_mux_control_put() rejects values greater than e->items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so value 2 must be rejected as well.
Accepting e->items can store an invalid mux state, pass it to the GPIO setter, and pass it on to the DAPM mux update path where it is used as an index into the enum text array.
Use the same >= e->items check used by the ASoC enum helpers.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 26, 2026 | Jul 26, 2026 |
| Redhat_linux | — | No solution exists | Jul 29, 2026 | Jul 24, 2026 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-nvidiaUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-raspiUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-7.0Upgrade linux-image-awsUpgrade linux-image-raspi-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-1011-gcp-64k | Jul 28, 2026 | Jul 28, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 28, 2026 | Jul 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub