CVE-2026-68348

A flaw was found in the Linux kernel's ASoC TAS2781 firmware parser. This vulnerability occurs when the parser reads variable-length description strings without properly checking for a null terminator within the firmware blob. A specially crafted, malformed firmware image could allow an attacker to cause the parser to read beyond the intended buffer, potentially leading to information disclosure or system instability.

This issue affects TI TAS2781 audio amplifiers. Firmware description strings are read with strlen() before confirming NUL terminator in blob. Systems without TAS2781 codecs are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.