Skip to content
Heist/ feed
Back to feed
HighFix available

ASoC: meson: aiu: Validate written enum values

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: aiu: Validate written enum values The AIU HDMI and internal codec mux put callbacks use the written enum value with snd_soc_enum_item_to_val() before checking whether the value is valid for the enumeration. Reject out-of-range values before converting the enum item, matching the validation already done by the G12A HDMI and internal codec mux controls.

Products
Kernel
Affected versions
Not specified
Fixed versions
6.1.189, 6.12.111, 6.18.53, 6.6.158, 7.1.5
CVEs
CVE-2026-74294
Confirmed fixed CVEs
Not specified
Updated in this feed
7 Nov 2026, 02:57 UTC · Revision 1

Source evidence

ASoC: meson: aiu: Validate written enum values

core-osv · Original source

Published 15 Aug 2026, 05:57 UTC

In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: aiu: Validate written enum values The AIU HDMI and internal codec mux put callbacks use the written enum value with snd_soc_enum_item_to_val() before checking whether the value is valid for the enumeration. Reject out-of-range values before converting the enum item, matching the validation already done by the G12A HDMI and internal codec mux controls.

osv:CVE-2026-74294

Kernel

Fixed versions: 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.1.5

Complete source record
{
  "id": "9de2a79d666a720b101358eb725c7dbddda10af3b621d802aa4897c5f22c3cbc",
  "url": "https://osv.dev/vulnerability/CVE-2026-74294",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "ASoC: meson: aiu: Validate written enum values",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: aiu: Validate written enum values The AIU HDMI and internal codec mux put callbacks use the written enum value with snd_soc_enum_item_to_val() before checking whether the value is valid for the enumeration. Reject out-of-range values before converting the enum item, matching the validation already done by the G12A HDMI and internal codec mux controls.",
    "evidence": "osv:CVE-2026-74294",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.1.189",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.158",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.12.111",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.18.53",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "7.1.5",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "CVE-2026-74294",
      "aliases": [
        "CVE-2026-74294"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "b82b734c0e9a75e1b956214ac523a8eb590f51f3"
                },
                {
                  "fixed": "91797708f99e4a910ab019760069c0a7e00a6fc0"
                },
                {
                  "fixed": "90703664dbc5a4bf3d84f649404318f3cafdbe69"
                },
                {
                  "fixed": "8a6d6735e7c02e88841cca1497ff3d8089f2ef24"
                },
                {
                  "fixed": "96f5b92d958bc34500500f29fab8e0b908f25397"
                },
                {
                  "fixed": "0965892cc486ca554d72eeb62d85ccf8d0137a5a"
                },
                {
                  "fixed": "d65adf85477247be04ac86886f8edfaa047b5d4a"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74294.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.7.0"
                },
                {
                  "fixed": "6.1.189"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.158"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.12.111"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.13.0"
                },
                {
                  "fixed": "6.18.53"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.19.0"
                },
                {
                  "fixed": "7.1.5"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74294.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:49.030898212Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/0965892cc486ca554d72eeb62d85ccf8d0137a5a",
        "https://git.kernel.org/stable/c/8a6d6735e7c02e88841cca1497ff3d8089f2ef24",
        "https://git.kernel.org/stable/c/90703664dbc5a4bf3d84f649404318f3cafdbe69",
        "https://git.kernel.org/stable/c/91797708f99e4a910ab019760069c0a7e00a6fc0",
        "https://git.kernel.org/stable/c/96f5b92d958bc34500500f29fab8e0b908f25397",
        "https://git.kernel.org/stable/c/d65adf85477247be04ac86886f8edfaa047b5d4a",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74294.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-74294",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74294.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-74294",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 517554,
  "published_at": "2026-08-15T05:57:59.508+00:00"
}