CVE-2026-74292

A flaw was found in the Linux kernel's audio driver for Tegra devices, specifically within the AHUB component. This vulnerability arises because a function attempts to read data from an array using an index that has not been properly checked, potentially leading to access beyond the array's boundaries. A local attacker could exploit this issue to cause the system to crash, resulting in a denial of service, or potentially gain access to sensitive information.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation is restricted to local authenticated users on systems with specific NVIDIA Tegra hardware and does not permit remote code execution. Under typical enterprise deployments, this driver is not engaged unless running on specialized ARM platforms utilizing the Tegra Audio Hub (AHUB). A local attacker with permission to manipulate ALSA mixer controls could trigger an out-of-bounds read, potentially leading to a denial of service via a kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.