Bug 2516888 (CVE-2026-74294)

Summary: CVE-2026-74294 kernel: ASoC: meson: aiu: Validate written enum values
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: rhel-process-autobot, watson-tool-maintainers
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in the Linux kernel's Advanced Linux Sound Architecture (ALSA) System on Chip (ASoC) meson audio interface unit (AIU) component. The AIU HDMI and internal codec mux put callbacks do not properly validate enum values before processing them. This allows an attacker to provide out-of-range enum values, which could lead to unexpected system behavior or a denial of service.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-08-15 06:38:42 UTC 
In the Linux kernel, the following vulnerability has been resolved:

ASoC: meson: aiu: Validate written enum values

The AIU HDMI and internal codec mux put callbacks use the written enum
value with snd_soc_enum_item_to_val() before checking whether the value is
valid for the enumeration.

Reject out-of-range values before converting the enum item, matching the
validation already done by the G12A HDMI and internal codec mux controls.
Comment 1 Keith Grant 2026-08-20 15:08:51 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026081548-CVE-2026-74294-6fc0@gregkh/T