CVE-2026-80526

HighCVSS 7.8/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: tas2562: Validate values for volume writes

tas2562_volume_control_put() does not do any validation of the control value written by userspace, it uses it to look up a value in a fixed size array which can easily be overflowed and then writes whatever value it gets back to the device. Add validation that we are loading a value we have in the array.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= bf726b1c86f2caab70ad614cdf7da3b81ad08e69, < 602b209a5cfcf8e891afba12fad109db4141d4b8; >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69, < 1f389ecd0c35e9e281036e44c121df904f3164c1; >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69, < 20bdbb1376457ecbf418bf677fd285820d1fc011; >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69, < db488d653d896fcf9ac87e15239924c2928bbc3c; >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69, < c37a0461c0d0a70c5de4fdbd70449a7f53c12dda; >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69, < 8fb41964f7e4e4207c8999af2056894caa7a252a
LinuxLinux5.7

References

Timeline

Published
Aug 26, 2026
Last modified
Oct 30, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-805277.5In the Linux kernel, the following vulnerability has been resolved: ceph: fix hanging __ceph_get_caps() with stale mds_wanted A reader canCVE-2026-805289.8In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current->journal_info handle_reply(CVE-2026-80529In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlog_recover_dquCVE-2026-80538.8An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger anCVE-2026-805307.1In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN CVE-2026-805317.8In the Linux kernel, the following vulnerability has been resolved: xfs: avoid UAF on sc->tempip in xrep_tempfile_create LOLLM noticed a pCVE-2026-80532In the Linux kernel, the following vulnerability has been resolved: xfs: fix another iunlink infinite loop bug in online fsck xrep_iunlinkCVE-2026-80533In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair LOLLCVE-2026-80534In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfs_dq_get_next_id xfs_dq_get_next_id(CVE-2026-80535In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLCVE-2026-805368.4In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlog_recover_do_reg_bCVE-2026-805377.8In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfs_rtre
CVE-2026-80526: High severity, CVSS 7.8 | Vulnix