CVE-2026-72304

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Time-of-Check to Time-of-Use (TOCTOU) issue exists in the sof ipc4 bytes put() function. The copy size is derived from the existing data->size in the buffer instead of the size field of the incoming new data from ucontrol. This discrepancy can lead to the use of an incorrect length during the copy process, potentially resulting in the truncation of valid data or the copying of stale bytes. The issue is resolved by validating and using the sof abi hdr.size from ucontrol before the copy operation occurs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.