SB20260815171 - Out-of-bounds read in Linux kernel soc codecs
Published: August 15, 2026
Security Bulletin ID
SB20260815171
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2026-74295)
CWE-ID: CWE-125 - Out-of-bounds read
CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local user to disclose sensitive information.
The vulnerability exists due to an out-of-bounds read in the hdac_hdmi_set_pin_port_mux() function when handling a written enumerated control value. A local user can supply an out-of-range enum value to disclose sensitive information.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/0b08baeccdcf52fad328ad645f5b4fbee04eea34
- https://git.kernel.org/stable/c/216336418c007c4b44c650acf2fd3d2de5bb81e8
- https://git.kernel.org/stable/c/7f02e9064b6f84e7f93c72f134306271eb4f7de4
- https://git.kernel.org/stable/c/8cbf24714d6b3f553fc959632c9781176a73a9a7
- https://git.kernel.org/stable/c/9131e4b023e0db5764680034bdc94aeae0b0f33d
- https://git.kernel.org/stable/c/bc464a6a9e352daa17b1636c090cf3185710b9a0
- https://git.kernel.org/stable/c/d8961b5c7889b6ecc00f1409d36826df1665df27