CVE-2026-64243CWE-125CWE-129

CVE-2026-64243

High · published July 24, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
1.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: simple-mux: Fix enum control bounds check

simple_mux_control_put() rejects values greater than e->items, but

enum control values are zero based. For the two-entry mux used by this

driver, valid values are 0 and 1, so value 2 must be rejected as well.

Accepting e->items can store an invalid mux state, pass it to the GPIO

setter, and pass it on to the DAPM mux update path where it is used as

an index into the enum text array.

Use the same >= e->items check used by the ASoC enum helpers.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00117 · 1.6th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-129 · Improper Validation of Array Index
Published
2026-07-24T20:16Z
Affected products (11)
ProductVersionsFixed in
linux/linux_kernel≥ 5.11, < 5.15.2105.15.210
linux/linux_kernel≥ 5.16, < 6.1.1766.1.176
linux/linux_kernel≥ 6.2, < 6.6.1436.6.143
linux/linux_kernel≥ 6.7, < 6.12.936.12.93
linux/linux_kernel≥ 6.13, < 6.18.356.18.35
linux/linux_kernel≥ 6.19, < 7.0.127.0.12
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (7)
EPSS history
Timeline
  • 24 JUL 15:27Z
    ASoC: codecs: simple-mux: Fix enum control bounds check
    cvelistv5