CVE-2026-90196

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ASoC SOF component where topology mixer minimum and maximum values are treated as non-negative indices for the volume table. These values are stored in signed fields, and the system allocates max + 1 entries using an integer argument. This can lead to problems if the range is inverted or if the maximum value is at or above INT MAX (the maximum value for a signed 32-bit integer), as these cannot be represented safely during increment or storage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.