CVE-2026-72304

A flaw was found in the Advanced Linux Sound Architecture (ALSA) System on Chip (ASoC) Sound Open Firmware (SOF) ipc4-control component of the Linux kernel. This Time-of-check to time-of-use (TOCTOU) vulnerability occurs in the sof_ipc4_bytes_put() function, where the copy size is incorrectly derived from old buffer data instead of the new incoming data. This can lead to either truncating valid data or copying stale bytes, potentially resulting in data corruption.

This vulnerability is rated as Moderate because successful exploitation requires local user access with permissions to manipulate ALSA audio controls on systems equipped with Sound Open Firmware (SOF) hardware. Standard enterprise server installations generally do not configure sound hardware or expose audio interfaces to unprivileged users, significantly limiting the attack surface in production environments. On affected desktop or edge deployments, an authenticated local attacker could trigger incorrect buffer sizing during control operations, resulting in out-of-bounds memory operations or a kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.