CVE-2026-74333
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-legacy: Bound DAI link iteration create_sdw_dailinks() walks soc_dais until it finds an entry with initialised cleared, but soc_dais is allocated with exactly num_ends entries. If all entries are initialised, the loop reads past the end of the array. This was reported by KASAN: BUG: KASAN: slab-out-of-bounds in mc_probe+0x26b3/0x2774 [snd_acp_sdw_legacy_mach] Read of size 1 Pass the allocated entry count to create_sdw_dailinks() and stop before reading past the array.
How to fix
- Linux Linux1279bdab5fa1f28c168e54215db506e87c6fac1e, 0230471eef5902207516851dcd47c559571dded2, d49ecdf327cc91062d2f80996a163cf65fda1e60 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 2981d9b0789c44b7375e7d599caf71bd843afc9e ≤ v < 1279bdab5fa1f28c168e54215db506e87c6fac1e, 2981d9b0789c44b7375e7d599caf71bd843afc9e ≤ v < 0230471eef5902207516851dcd47c559571dded2, 2981d9b0789c44b7375e7d599caf71bd843afc9e ≤ v < d49ecdf327cc91062d2f80996a163cf65fda1e60, 6.13 | 1279bdab5fa1f28c168e54215db506e87c6fac1e, 0230471eef5902207516851dcd47c559571dded2, d49ecdf327cc91062d2f80996a163cf65fda1e60 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.