CVE-2026-90068

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An off-by-one error exists in the ASoC (ALSA System on Chip) DAPM (Dynamic Audio Power Management) component. The function snd soc dapm put enum double() fails to properly validate the second enum channel, allowing item[1] to equal e->items. This leads to an out-of-bounds read when snd soc enum item to val() indexes e->values without its own boundary check. This issue specifically affects enums with a value table, such as those used in adav80x, where writing a value of three can result in reading past the end of adav80x mux values.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.