ASoC: tegra: tegra210_ahub: Validate written enum value
In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210_ahub: Validate written enum value tegra_ahub_put_value_enum() reads e->values[item[0]] before checking whether item[0] is within the enum item range. The existing check therefore happens too late to prevent an out-of-range read of the values array. Move the check before the array access.
CVE-2026-74292
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-74292
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "16e1bcc2caf446fa3e1daa040b59fd6f6272a766",
"lessThan": "4e45e4c2015519a39c40eb575c03b77807fb5080",
"versionType": "git"
},
{
"status": "affected",
"version": "16e1bcc2caf446fa3e1daa040b59fd6f6272a766",
"lessThan": "964f8f9015fb117402d8d2186593397cd93388e9",
"versionType": "git"
},
{
"status": "affected",
"version": "16e1bcc2caf446fa3e1daa040b59fd6f6272a766",
"lessThan": "2ec7d16fe21c68b0879873a2abf9aac854c96134",
"versionType": "git"
},
{
"status": "affected",
"version": "16e1bcc2caf446fa3e1daa040b59fd6f6272a766",
"lessThan": "4bcb23635d5059ee71f3fb89719ea14aada6fd59",
"versionType": "git"
},
{
"status": "affected",
"version": "16e1bcc2caf446fa3e1daa040b59fd6f6272a766",
"lessThan": "f67d63628fe158b3a6e6b33a2b8c83ff118699d1",
"versionType": "git"
},
{
"status": "affected",
"version": "16e1bcc2caf446fa3e1daa040b59fd6f6272a766",
"lessThan": "e098c9c6477dfa3cb363282100108484ceba5cc5",
"versionType": "git"
},
{
"status": "affected",
"version": "16e1bcc2caf446fa3e1daa040b59fd6f6272a766",
"lessThan": "226d93b65f4f99b35fb7a03bdb24acb577364ebc",
"versionType": "git"
},
{
"status": "affected",
"version": "16e1bcc2caf446fa3e1daa040b59fd6f6272a766",
"lessThan": "1d8aabb413b5638670dfd1162169edc0ba276a2e",
"versionType": "git"
}
],
"programFiles": [
"sound/soc/tegra/tegra210_ahub.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.9"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.9",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.261",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.212",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.178",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.145",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.97",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.40",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.1.5",
"versionType": "semver",
"lessThanOrEqual": "7.1.*"
},
{
"status": "unaffected",
"version": "7.2",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"sound/soc/tegra/tegra210_ahub.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-74292
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #33084 · Revision 1
- Added to Heist Feed
- Publisher date