https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 17:56:11 +0000 https://vulnerability.circl.lu/vuln/cve-2026-72261 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control</p> <p>In snd_sof_update_control(), firmware-provided cdata-&gt;num_elems is checked against local_cdata-&gt;data-&gt;size but never against the actual allocation size. If local_cdata-&gt;data-&gt;size was previously set to an inconsistent value, the memcpy could write past the allocated buffer.</p> <p>Add a bounds check to ensure num_elems fits within the available space in the ipc_control_data allocation before copying.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control</p> <p>In snd_sof_update_control(), firmware-provided cdata-&gt;num_elems is checked against local_cdata-&gt;data-&gt;size but never against the actual allocation size. If local_cdata-&gt;data-&gt;size was previously set to an inconsistent value, the memcpy could write past the allocated buffer.</p> <p>Add a bounds check to ensure num_elems fits within the available space in the ipc_control_data allocation before copying.</p> https://vulnerability.circl.lu/vuln/cve-2026-72261