CVE-2026-68348

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The TAS2781 firmware parser in the ASoC (ALSA System on Chip) component uses strlen() to read variable-length description strings without first verifying the presence of a NUL terminator within the firmware blob. A malformed firmware image lacking this terminator can cause the parser to read beyond the firmware buffer boundaries before size checks are performed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.