CVE-2026-72488

A flaw was found in the Linux kernel's soundwire component. An out-of-bounds memory access can occur within the sdw_add_element_group_count function due to an incorrect loop condition. This error allows the system to attempt to access memory beyond its allocated buffer. Such an issue could lead to system instability or unexpected behavior.

This vulnerability is rated as Moderate impact because exploitation requires local access, depends on the presence of SoundWire audio hardware, and primarily leads to a denial of service. Standard Red Hat Enterprise Linux server environments typically do not deploy or configure SoundWire controllers, significantly limiting exposure in common production environments. An authenticated local user triggering the issue on affected hardware could cause a kernel crash, but confidentiality and integrity of system data remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.