{"id":"CVE-2026-74295","summary":"ASoC: codecs: hdac_hdmi: Validate written enum value","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: hdac_hdmi: Validate written enum value\n\nhdac_hdmi_set_pin_port_mux() uses the written enum value to index the\ntexts array before calling snd_soc_dapm_put_enum_double(), which validates\nthat the value is within the enum item range.\n\nAn out-of-range value can therefore make the driver read past the texts\narray before the helper rejects the write. Move the lookup after the helper\nhas accepted the value.","modified":"2026-08-18T03:56:45.862681239Z","published":"2026-08-15T05:58:00.123Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74295.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/0b08baeccdcf52fad328ad645f5b4fbee04eea34"},{"type":"WEB","url":"https://git.kernel.org/stable/c/216336418c007c4b44c650acf2fd3d2de5bb81e8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7f02e9064b6f84e7f93c72f134306271eb4f7de4"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8cbf24714d6b3f553fc959632c9781176a73a9a7"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9131e4b023e0db5764680034bdc94aeae0b0f33d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bc464a6a9e352daa17b1636c090cf3185710b9a0"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d8961b5c7889b6ecc00f1409d36826df1665df27"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74295.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74295"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"4a3478debf36c0aa0cf0860daec245b13cd4448f"},{"fixed":"216336418c007c4b44c650acf2fd3d2de5bb81e8"},{"fixed":"bc464a6a9e352daa17b1636c090cf3185710b9a0"},{"fixed":"8cbf24714d6b3f553fc959632c9781176a73a9a7"},{"fixed":"7f02e9064b6f84e7f93c72f134306271eb4f7de4"},{"fixed":"9131e4b023e0db5764680034bdc94aeae0b0f33d"},{"fixed":"d8961b5c7889b6ecc00f1409d36826df1665df27"},{"fixed":"0b08baeccdcf52fad328ad645f5b4fbee04eea34"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74295.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.6.0"},{"fixed":"5.15.212"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.97"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74295.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"}]}