{"id":"CVE-2026-80583","summary":"ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses\n\nThe \"DEC0 MODE\" to \"DEC7 MODE\" controls are enumerated, but\ntx_macro_dec_mode_get() and tx_macro_dec_mode_put() access their\nvalue through ucontrol-\u003evalue.integer.value[0] (a long) instead of\nucontrol-\u003evalue.enumerated.item[0] (an unsigned int).\n\nThis same pattern was fixed in the sibling drivers by\ncommit bcfe5f76cc40 (\"ASoC: codecs: rx-macro: fix accessing array\nout of bounds for enum type\") and\ncommit 0ea5eff7c606 (\"ASoC: codecs: va-macro: fix accessing array\nout of bounds for enum type\"), but tx-macro was missed.\n\nOn 64-bit kernels built with CONFIG_SND_CTL_DEBUG, the elem value\nsanity check catches the 4 bytes written past the enumerated item\nand every read of these controls fails with -EINVAL:\n\n  snd-sm8250 sound: control 2:0:0:DEC0 MODE:0: access overflow","modified":"2026-08-28T03:47:29.298285965Z","published":"2026-08-26T14:37:39.704Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80583.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1ba381759e45d5d0442452cfa5c42e836191a568"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2ed3601e9db08fbdb071bd3d7bd8f115d6d871b0"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3ee3c26ceee562079596abc9bc3307dd56dab4ed"},{"type":"WEB","url":"https://git.kernel.org/stable/c/48b76879f5bfc8584b99052510ac645c6ade8d2b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b6baab796d11fb84c0e9444ffca91af5eab22c25"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dbc81b518f6936131bfd858be71cd4295136809c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f84f2c81d792cf1e65571108a3bdd2c29e09e995"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80583.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80583"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"c39667ddcfc516fee084e449179d54430a558298"},{"fixed":"dbc81b518f6936131bfd858be71cd4295136809c"},{"fixed":"f84f2c81d792cf1e65571108a3bdd2c29e09e995"},{"fixed":"48b76879f5bfc8584b99052510ac645c6ade8d2b"},{"fixed":"2ed3601e9db08fbdb071bd3d7bd8f115d6d871b0"},{"fixed":"b6baab796d11fb84c0e9444ffca91af5eab22c25"},{"fixed":"3ee3c26ceee562079596abc9bc3307dd56dab4ed"},{"fixed":"1ba381759e45d5d0442452cfa5c42e836191a568"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80583.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.12.0"},{"fixed":"5.15.218"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.185"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.154"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.106"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.47"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.10"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80583.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}