CVE-2026-72415

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ASOC SDCA component where the ge put enum double() function fails to validate the user-supplied enumeration index item[0] before passing it to snd soc enum item to val(). Because snd soc enum item to val() uses this index to access the heap-allocated e->values[] array, providing an out-of-range value for item[0] allows a read operation past the end of the values buffer. The existing bounds check in snd soc dapm put enum double() occurs after this operation and therefore fails to prevent the out-of-bounds read.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.