{"id":"CVE-2026-80583","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-80583","summary":"ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses\n\nThe \"DEC0 MODE\" to \"DEC7 MODE\" controls are enumerated, but\ntx_macro_dec_mode_get() and tx_macro_dec_mode_put() access their\nvalue through ucontrol->value.integer.value[0] (a long) instead of\nucontrol->value.enumerated.item[0] (an unsigned int).\n\nThis same pattern was fixed in the sibling drivers by\ncommit bcfe5f76cc40 (\"ASoC: codecs: rx-macro: fix accessing array\nout of bounds for enum type\") and\ncommit 0ea5eff7c606 (\"ASoC: codecs: va-macro: fix accessing array\nout of bounds for enum type\"), but tx-macro was missed.\n\nOn 64-bit kernels built with CONFIG_SND_CTL_DEBUG, the elem value\nsanity check catches the 4 bytes written past the enumerated item\nand every read of these controls fails with -EINVAL:\n\n  snd-sm8250 sound: control 2:0:0:DEC0 MODE:0: access overflow","published":"2026-08-26T14:37:39.704Z","modified":"2026-08-28T03:47:29.298285965Z","cvss":{"score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"Linux","name":"Kernel","fixedVersion":"5.15.218"}],"fix":null,"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1ba381759e45d5d0442452cfa5c42e836191a568"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2ed3601e9db08fbdb071bd3d7bd8f115d6d871b0"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3ee3c26ceee562079596abc9bc3307dd56dab4ed"},{"type":"WEB","url":"https://git.kernel.org/stable/c/48b76879f5bfc8584b99052510ac645c6ade8d2b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b6baab796d11fb84c0e9444ffca91af5eab22c25"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dbc81b518f6936131bfd858be71cd4295136809c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f84f2c81d792cf1e65571108a3bdd2c29e09e995"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80583.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80583"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-28T03:47:29.298285965Z"}}