CVE-2026-90196
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: validate topology volume range before allocation SOF treats the topology mixer min and max values as non-negative indices into its volume table. It stores them in signed fields, allocates max + 1 entries through an int argument, and later indexes the table with the stored range. An inverted range is invalid, while a maximum at or above INT_MAX cannot be represented safely after the increment or in the signed fields. Validate the complete range before storing it or allocating the table.
How to fix
- Linux Linux992e130b888699d18da901b593d7a0fb75041a03, cd63a1eb677e9548ba2d512be5dac4cb474ae145, 8e1d63f5e272061208455b5aa4cc0d5bcbe5c1a8, d2f41287b51a3261d447ae38000f7a6f5860663a, 72d0b77412aef2cec554cc84e176658f2a48dafa, a698e4a60fa54268a38f4e66378851a196cb139b or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e ≤ v < 992e130b888699d18da901b593d7a0fb75041a03, 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e ≤ v < cd63a1eb677e9548ba2d512be5dac4cb474ae145, 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e ≤ v < 8e1d63f5e272061208455b5aa4cc0d5bcbe5c1a8, 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e ≤ v < d2f41287b51a3261d447ae38000f7a6f5860663a, 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e ≤ v < 72d0b77412aef2cec554cc84e176658f2a48dafa, 311ce4fe7637d96608b6e57bf9ebbd8aabcf429e ≤ v < a698e4a60fa54268a38f4e66378851a196cb139b, 5.2 | 992e130b888699d18da901b593d7a0fb75041a03, cd63a1eb677e9548ba2d512be5dac4cb474ae145, 8e1d63f5e272061208455b5aa4cc0d5bcbe5c1a8, d2f41287b51a3261d447ae38000f7a6f5860663a, 72d0b77412aef2cec554cc84e176658f2a48dafa, a698e4a60fa54268a38f4e66378851a196cb139b |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.