CVE-2026-80910

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four "WSA RX* Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol->value.integer.value[0] (a long) instead of ucontrol->value.enumerated.item[0] (an unsigned int). This same pattern was fixed in the sibling drivers by commit bcfe5f76cc40 ("ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type") and commit 0ea5eff7c606 ("ASoC: codecs: va-macro: fix accessing array out of bounds for enum type"), but wsa-macro was missed. On 64-bit kernels with CONFIG_SND_CTL_DEBUG this trips the elem value sanity check and every read of these controls fails with -EINVAL.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 4, 2026
First seenSep 4, 2026

How to fix

Update
  • Linux Linuxbd4e5f9c3b764dc0e2a5662f92d63d2f3767a78d, 4bcac4bf304a3ec746192e49a669c236aaf27dbf, 891129df5de79cd533ae335c6eab24df2ff2b0fd, 524aa7b9954b0a43dd13f71ecbbac52a151c326d, 2fe7a89b2b5b73be35c1e493d0246314ba54e427, 7bcdde412e6c744f6135e02b12a735e2e37b639f, 56f24311fd5607588a47e44675195a9efb200f29 or later

Affected products

ProductAffected versionsFixed in
Linux Linux809bcbcecebff86003e13f07444d21b9d6652a64 ≤ v < bd4e5f9c3b764dc0e2a5662f92d63d2f3767a78d, 809bcbcecebff86003e13f07444d21b9d6652a64 ≤ v < 4bcac4bf304a3ec746192e49a669c236aaf27dbf, 809bcbcecebff86003e13f07444d21b9d6652a64 ≤ v < 891129df5de79cd533ae335c6eab24df2ff2b0fd, 809bcbcecebff86003e13f07444d21b9d6652a64 ≤ v < 524aa7b9954b0a43dd13f71ecbbac52a151c326d, 809bcbcecebff86003e13f07444d21b9d6652a64 ≤ v < 2fe7a89b2b5b73be35c1e493d0246314ba54e427, 809bcbcecebff86003e13f07444d21b9d6652a64 ≤ v < 7bcdde412e6c744f6135e02b12a735e2e37b639f, 809bcbcecebff86003e13f07444d21b9d6652a64 ≤ v < 56f24311fd5607588a47e44675195a9efb200f29, 5.11bd4e5f9c3b764dc0e2a5662f92d63d2f3767a78d, 4bcac4bf304a3ec746192e49a669c236aaf27dbf, 891129df5de79cd533ae335c6eab24df2ff2b0fd, 524aa7b9954b0a43dd13f71ecbbac52a151c326d, 2fe7a89b2b5b73be35c1e493d0246314ba54e427, 7bcdde412e6c744f6135e02b12a735e2e37b639f, 56f24311fd5607588a47e44675195a9efb200f29

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.