{"apiVersion":"1.0","identifier":"CVE-2026-72415","description":"In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Validate written enum value in ge_put_enum_double() ge_put_enum_double() passes the user-supplied enumeration index item[0] to snd_soc_enum_item_to_val() without checking it against the number of items in the enum: ret = snd_soc_enum_item_to_val(e, item[0]); snd_soc_enum_item_to_val() indexes the heap-allocated e->values[] array with that index (e->values is set from a devm_kcalloc() of e->items entries), so a control write with an out-of-range item[0] reads past the end of the values buffer. The bounds check in snd_soc_dapm_put_enum_double() only runs afterwards, so it does not prevent the read here. Reject an out-of-range item before using it, matching the other enum put handlers. This issue was pointed out by the Sashiko AI review bot while reviewing a related enum-validation series: https://lore.kernel.org/all/20260609125735.CEB651F00893@smtp.kernel.org/","publishedAt":"2026-08-15T06:22:15","lastModifiedAt":"2026-08-17T06:19:08","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-72415","cvssScore":7.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","epssProbability":0.0015,"riskScore":0.72,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-72415","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-72415","en":"https://www.redsauce.net/en/cves/CVE-2026-72415","fr":"https://www.redsauce.net/fr/cves/CVE-2026-72415","pt":"https://www.redsauce.net/pt/cves/CVE-2026-72415","de":"https://www.redsauce.net/de/cves/CVE-2026-72415","sk":"https://www.redsauce.net/sk/cves/CVE-2026-72415","el":"https://www.redsauce.net/el/cves/CVE-2026-72415"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-72415"}}