CVE-2026-74294ASoC: meson: aiu: Validate written enum values
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: aiu: Validate written enum values The AIU HDMI and internal codec mux put callbacks use the written enum value with snd_soc_enum_item_to_val() before checking whether the value is valid for the enumeration. Reject out-of-range values before converting the enum item, matching the validation already done by the G12A HDMI and internal codec mux controls.
- CVSS
- 7.3 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from b82b734c0e9a75e1b956214ac523a8eb590f51f3 before 91797708f99e4a910ab019760069c0a7e00a6fc0; from b82b734c0e9a75e1b956214ac523a8eb590f51f3 before 90703664dbc5a4bf3d84f649404318f3cafdbe69; from b82b734c0e9a75e1b956214ac523a8eb590f51f3 before 8a6d6735e7c02e88841cca1497ff3d8089f2ef24; from b82b734c0e9a75e1b956214ac523a8eb590f51f3 before 96f5b92d958bc34500500f29fab8e0b908f25397; from b82b734c0e9a75e1b956214ac523a8eb590f51f3 before 0965892cc486ca554d72eeb62d85ccf8d0137a5a; from b82b734c0e9a75e1b956214ac523a8eb590f51f3 before d65adf85477247be04ac86886f8edfaa047b5d4a | CNA record |
References
- https://git.kernel.org/stable/c/91797708f99e4a910ab019760069c0a7e00a6fc0
- https://git.kernel.org/stable/c/90703664dbc5a4bf3d84f649404318f3cafdbe69
- https://git.kernel.org/stable/c/8a6d6735e7c02e88841cca1497ff3d8089f2ef24
- https://git.kernel.org/stable/c/96f5b92d958bc34500500f29fab8e0b908f25397
- https://git.kernel.org/stable/c/0965892cc486ca554d72eeb62d85ccf8d0137a5a
- https://git.kernel.org/stable/c/d65adf85477247be04ac86886f8edfaa047b5d4a
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.