CVE-2025-71286CWE-131

CVE-2025-71286

High · published May 6, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls

The size of the data behind of scontrol->ipc_control_data for bytes

controls is:

[1] sizeof(struct sof_ipc4_control_data) + // kernel only struct

[2] sizeof(struct sof_abi_hdr)) + payload

The max_size specifies the size of [2] and it is coming from topology.

Change the function to take this into account and allocate adequate amount

of memory behind scontrol->ipc_control_data.

With the change we will allocate [1] amount more memory to be able to hold

the full size of data.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00138 · 2.9th percentile
Weakness
CWE-131 · Incorrect Calculation of Buffer Size
Published
2026-05-06T16:16Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 6.7, < 6.12.756.12.75
linux/linux_kernel≥ 6.13, < 6.18.166.18.16
linux/linux_kernel≥ 6.19, < 6.19.66.19.6
linux/linux_kernel≥ 6.4, < 6.6.1286.6.128
References (5)
EPSS history
Timeline
  • 06 MAY 11:32Z
    ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls
    cvelistv5