What’s Vulnerable › Vulnerabilities

CVE-2026-72261: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-10-16

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control In snd_sof_update_control(), firmware-provided cdata->num_elems is checked against local_cdata->data->size but never against the actual allocation size. If local_cdata->data->size was previously set to an inconsistent value, the memcpy could write past the allocated buffer. Add a bounds check to ensure num_elems fits within the available space in the ipc_control_data allocation before copying.

Affected products

• Linux kernel: 5.18 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1dc25a3e06364f48c4ef06016852f8b82425151a
• https://git.kernel.org/stable/c/2a591bf6fd41fd14bdae689aafac4a9ee702c23c
• https://git.kernel.org/stable/c/390aa4c9339bb0ec0bc8d554e830faf93ca9d49e
• https://git.kernel.org/stable/c/d3abaedf6a58469610136d2dace1a85cddf7afcf
• https://git.kernel.org/stable/c/ecf67f1302f2080b4d241b973364aacda70ad740
• https://git.kernel.org/stable/c/ee781058cd4d71e4449f41cbe6a3b8c59daa2c51

Get alerted when CVE-2026-72261 or the next vulnerability affects your stack