CVE-2026-72488
Description
In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_group_count found by syzkaller The original implementation caused an out-of-bounds memory access in the sdw_add_element_group_count for-loop when i == num. for (i = 0; i <= num; i++) { if (rate == group->rates[i] && lane == group->lanes[i]) ... To fix this error, the function now checks for existing rate/lane entries in the group(a function parameter) using a for-loop before adding them. No functional changes apart from this fix.
How to fix
- Linux Linuxc35474cf6a7d0891ebebbeda08ce34b602885ab6, a2275dce05e6d1cce69bf68f23ea7a63c0c54bae, 5c3ce6d3559ce57e6c3108aa9ecf7b32764188c5, a454f61747c97e2eadaa7a35ffc1f4b1645c6a53, e483a406a23a92d5202e8d324f206e127eef48ff, f772ff5a0e6758fd412803c09e03ba3bca5f5878 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 9026118f20e28f202dab34f219bbb831ffb8c4dc ≤ v < c35474cf6a7d0891ebebbeda08ce34b602885ab6, 9026118f20e28f202dab34f219bbb831ffb8c4dc ≤ v < a2275dce05e6d1cce69bf68f23ea7a63c0c54bae, 9026118f20e28f202dab34f219bbb831ffb8c4dc ≤ v < 5c3ce6d3559ce57e6c3108aa9ecf7b32764188c5, 9026118f20e28f202dab34f219bbb831ffb8c4dc ≤ v < a454f61747c97e2eadaa7a35ffc1f4b1645c6a53, 9026118f20e28f202dab34f219bbb831ffb8c4dc ≤ v < e483a406a23a92d5202e8d324f206e127eef48ff, 9026118f20e28f202dab34f219bbb831ffb8c4dc ≤ v < f772ff5a0e6758fd412803c09e03ba3bca5f5878, 5.10 | c35474cf6a7d0891ebebbeda08ce34b602885ab6, a2275dce05e6d1cce69bf68f23ea7a63c0c54bae, 5c3ce6d3559ce57e6c3108aa9ecf7b32764188c5, a454f61747c97e2eadaa7a35ffc1f4b1645c6a53, e483a406a23a92d5202e8d324f206e127eef48ff, f772ff5a0e6758fd412803c09e03ba3bca5f5878 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.