---
id: CVE-2026-80526
title: 'ASoC: tas2562: Validate values for volume writes'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ASoC: tas2562: Validate values for volume writes

  tas2562_volume_control_put() does not do any validation of the control
  value written by userspace, it uses it to look …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 <
    602b209a5cfcf8e891afba12fad109db4141d4b8
  - >-
    Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 <
    1f389ecd0c35e9e281036e44c121df904f3164c1
  - >-
    Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 <
    20bdbb1376457ecbf418bf677fd285820d1fc011
  - >-
    Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 <
    db488d653d896fcf9ac87e15239924c2928bbc3c
  - >-
    Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 <
    c37a0461c0d0a70c5de4fdbd70449a7f53c12dda
  - >-
    Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 <
    8fb41964f7e4e4207c8999af2056894caa7a252a
  - Linux 5.7
published: '2026-08-26'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:30:33.861Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-80526'
references:
  - url: 'https://git.kernel.org/stable/c/602b209a5cfcf8e891afba12fad109db4141d4b8'
  - url: 'https://git.kernel.org/stable/c/1f389ecd0c35e9e281036e44c121df904f3164c1'
  - url: 'https://git.kernel.org/stable/c/20bdbb1376457ecbf418bf677fd285820d1fc011'
  - url: 'https://git.kernel.org/stable/c/db488d653d896fcf9ac87e15239924c2928bbc3c'
  - url: 'https://git.kernel.org/stable/c/c37a0461c0d0a70c5de4fdbd70449a7f53c12dda'
  - url: 'https://git.kernel.org/stable/c/8fb41964f7e4e4207c8999af2056894caa7a252a'
tags:
  - cve.org
epss: 0.0013
epssPercentile: 0.02621
ingestedAt: '2026-11-05T15:02:32.582Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ASoC: tas2562: Validate values for volume writes

tas2562_volume_control_put() does not do any validation of the control
value written by userspace, it uses it to look up a value in a fixed
size array which can easily be overflowed and then writes whatever value
it gets back to the device.  Add validation that we are loading a value
we have in the array.

## Affected

- `Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 602b209a5cfcf8e891afba12fad109db4141d4b8`
- `Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 1f389ecd0c35e9e281036e44c121df904f3164c1`
- `Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 20bdbb1376457ecbf418bf677fd285820d1fc011`
- `Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < db488d653d896fcf9ac87e15239924c2928bbc3c`
- `Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < c37a0461c0d0a70c5de4fdbd70449a7f53c12dda`
- `Linux >= bf726b1c86f2caab70ad614cdf7da3b81ad08e69 < 8fb41964f7e4e4207c8999af2056894caa7a252a`
- `Linux 5.7`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.