Answer in brief
CVE-2026-72302 records a Unknown severity vulnerability in ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=10f461d79c2d1afb22344986cc1b4631169cf25e <6856b3c23b0995eefad5a6142b4365ef70e1fe4a || >=10f461d79c2d1afb22344986cc1b4631169cf25e <89a2309a9eec80d4c19e3aed62c4f923594d1911 || >=10f461d79c2d1afb22344986cc1b4631169cf25e <ffd79e77f2fbacd7a5d40ad1d4c7f3f089a8f2f3 || >=10f461d79c2d1afb22344986cc1b4631169cf25e <711d912b18763af62a63aa8f2419a774eb63bba4 || >=10f461d79c2d1afb22344986cc1b4631169cf25e <312c7d2ebe696da3f885eee77d52297664e57c53 || >=10f461d79c2d1afb22344986cc1b4631169cf25e <8791977d7289f6e9d2b014f60a5455f053a7bc04 | 6856b3c23b0995eefad5a6142b4365ef70e1fe4a, 89a2309a9eec80d4c19e3aed62c4f923594d1911, ffd79e77f2fbacd7a5d40ad1d4c7f3f089a8f2f3, 711d912b18763af62a63aa8f2419a774eb63bba4, 312c7d2ebe696da3f885eee77d52297664e57c53, 8791977d7289f6e9d2b014f60a5455f053a7bc04 |
| Linux/Linuxgeneric | 5.18 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc In sof_ipc3_control_update(), the expected_size calculation uses firmware-provided cdata->num_elems in arithmetic that could overflow on 32-bit platforms, wrapping to a small value. This would allow the cdata->rhdr.hdr.size comparison to pass with mismatched sizes, potentially leading to out-of-bounds access in snd_sof_update_control. Use check_mul_overflow() and check_add_overflow() to detect and reject overflowed size calculations.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-72302 records a Unknown severity vulnerability in ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=10f461d79c2d1afb22344986cc1b4631169cf25e <6856b3c23b0995eefad5a6142b4365ef70e1fe4a || >=10f461d79c2d1afb22344986cc1b4631169cf25e <89a2309a9eec80d4c19e3aed62c4f923594d1911 || >=10f461d79c2d1afb22344986cc1b4631169cf25e <ffd79e77f2fbacd7a5d40ad1d4c7f3f089a8f2f3 || >=10f461d79c2d1afb22344986cc1b4631169cf25e <711d912b18763af62a63aa8f2419a774eb63bba4 || >=10f461d79c2d1afb22344986cc1b4631169cf25e <312c7d2ebe696da3f885eee77d52297664e57c53 || >=10f461d79c2d1afb22344986cc1b4631169cf25e <8791977d7289f6e9d2b014f60a5455f053a7bc04 | 6856b3c23b0995eefad5a6142b4365ef70e1fe4a, 89a2309a9eec80d4c19e3aed62c4f923594d1911, ffd79e77f2fbacd7a5d40ad1d4c7f3f089a8f2f3, 711d912b18763af62a63aa8f2419a774eb63bba4, 312c7d2ebe696da3f885eee77d52297664e57c53, 8791977d7289f6e9d2b014f60a5455f053a7bc04 |
| Linux/Linuxgeneric | 5.18 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc In sof_ipc3_control_update(), the expected_size calculation uses firmware-provided cdata->num_elems in arithmetic that could overflow on 32-bit platforms, wrapping to a small value. This would allow the cdata->rhdr.hdr.size comparison to pass with mismatched sizes, potentially leading to out-of-bounds access in snd_sof_update_control. Use check_mul_overflow() and check_add_overflow() to detect and reject overflowed size calculations.
Quoted source text, attributed separately from HOL analysis.