Answer in brief
CVE-2026-72488 records a Unknown severity vulnerability in soundwire: fix bug in sdw_add_element_group_count found by syzkaller. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=9026118f20e28f202dab34f219bbb831ffb8c4dc <a454f61747c97e2eadaa7a35ffc1f4b1645c6a53 || >=9026118f20e28f202dab34f219bbb831ffb8c4dc <e483a406a23a92d5202e8d324f206e127eef48ff || >=9026118f20e28f202dab34f219bbb831ffb8c4dc <f772ff5a0e6758fd412803c09e03ba3bca5f5878 | a454f61747c97e2eadaa7a35ffc1f4b1645c6a53, e483a406a23a92d5202e8d324f206e127eef48ff, f772ff5a0e6758fd412803c09e03ba3bca5f5878 |
| Linux/Linuxgeneric | 5.10 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_group_count found by syzkaller The original implementation caused an out-of-bounds memory access in the sdw_add_element_group_count for-loop when i == num. for (i = 0; i <= num; i++) { if (rate == group->rates[i] && lane == group->lanes[i]) ... To fix this error, the function now checks for existing rate/lane entries in the group(a function parameter) using a for-loop before adding them. No functional changes apart from this fix.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-72488 records a Unknown severity vulnerability in soundwire: fix bug in sdw_add_element_group_count found by syzkaller. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=9026118f20e28f202dab34f219bbb831ffb8c4dc <a454f61747c97e2eadaa7a35ffc1f4b1645c6a53 || >=9026118f20e28f202dab34f219bbb831ffb8c4dc <e483a406a23a92d5202e8d324f206e127eef48ff || >=9026118f20e28f202dab34f219bbb831ffb8c4dc <f772ff5a0e6758fd412803c09e03ba3bca5f5878 | a454f61747c97e2eadaa7a35ffc1f4b1645c6a53, e483a406a23a92d5202e8d324f206e127eef48ff, f772ff5a0e6758fd412803c09e03ba3bca5f5878 |
| Linux/Linuxgeneric | 5.10 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_group_count found by syzkaller The original implementation caused an out-of-bounds memory access in the sdw_add_element_group_count for-loop when i == num. for (i = 0; i <= num; i++) { if (rate == group->rates[i] && lane == group->lanes[i]) ... To fix this error, the function now checks for existing rate/lane entries in the group(a function parameter) using a for-loop before adding them. No functional changes apart from this fix.
Quoted source text, attributed separately from HOL analysis.