{"id":"CVE-2026-80526","title":"ASoC: tas2562: Validate values for volume writes","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: tas2562: Validate values for volume writes\n\ntas2562_volume_control_put() does not do any validation of the control\nvalue written by userspace, it uses it to look …","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 602b209a5cfcf8e891afba12fad109db4141d4b8","Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 1f389ecd0c35e9e281036e44c121df904f3164c1","Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 20bdbb1376457ecbf418bf677fd285820d1fc011","Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < db488d653d896fcf9ac87e15239924c2928bbc3c","Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < c37a0461c0d0a70c5de4fdbd70449a7f53c12dda","Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 8fb41964f7e4e4207c8999af2056894caa7a252a","Linux 5.7"],"published":"2026-08-26","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:30:33.861Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-80526","references":[{"url":"https://git.kernel.org/stable/c/602b209a5cfcf8e891afba12fad109db4141d4b8"},{"url":"https://git.kernel.org/stable/c/1f389ecd0c35e9e281036e44c121df904f3164c1"},{"url":"https://git.kernel.org/stable/c/20bdbb1376457ecbf418bf677fd285820d1fc011"},{"url":"https://git.kernel.org/stable/c/db488d653d896fcf9ac87e15239924c2928bbc3c"},{"url":"https://git.kernel.org/stable/c/c37a0461c0d0a70c5de4fdbd70449a7f53c12dda"},{"url":"https://git.kernel.org/stable/c/8fb41964f7e4e4207c8999af2056894caa7a252a"}],"tags":["cve.org"],"epss":0.0013,"epssPercentile":0.02621,"ingestedAt":"2026-11-05T15:02:32.582Z","slug":"CVE-2026-80526","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nASoC: tas2562: Validate values for volume writes\n\ntas2562_volume_control_put() does not do any validation of the control\nvalue written by userspace, it uses it to look up a value in a fixed\nsize array which can easily be overflowed and then writes whatever value\nit gets back to the device.  Add validation that we are loading a value\nwe have in the array.\n\n## Affected\n\n- `Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 602b209a5cfcf8e891afba12fad109db4141d4b8`\n- `Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 1f389ecd0c35e9e281036e44c121df904f3164c1`\n- `Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 20bdbb1376457ecbf418bf677fd285820d1fc011`\n- `Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < db488d653d896fcf9ac87e15239924c2928bbc3c`\n- `Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < c37a0461c0d0a70c5de4fdbd70449a7f53c12dda`\n- `Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 8fb41964f7e4e4207c8999af2056894caa7a252a`\n- `Linux 5.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}