U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2026-72261 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control In snd_sof_update_control(), firmware-provided cdata->num_elems is checked against local_cdata->data->size but never against the actual allocation size. If local_cdata->data->size was previously set to an inconsistent value, the memcpy could write past the allocated buffer. Add a bounds check to ensure num_elems fits within the available space in the ipc_control_data allocation before copying.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/1dc25a3e06364f48c4ef06016852f8b82425151a kernel.org
https://git.kernel.org/stable/c/2a591bf6fd41fd14bdae689aafac4a9ee702c23c kernel.org
https://git.kernel.org/stable/c/390aa4c9339bb0ec0bc8d554e830faf93ca9d49e kernel.org
https://git.kernel.org/stable/c/d3abaedf6a58469610136d2dace1a85cddf7afcf kernel.org
https://git.kernel.org/stable/c/ecf67f1302f2080b4d241b973364aacda70ad740 kernel.org
https://git.kernel.org/stable/c/ee781058cd4d71e4449f41cbe6a3b8c59daa2c51 kernel.org

Weakness Enumeration

CWE-ID CWE Name Source

Change History

1 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2026-72261
NVD Published Date:
08/15/2026
NVD Last Modified:
08/15/2026
Source:
kernel.org