CVE-2026-80526

A flaw was found in the Linux kernel's ASoC (Audio System on Chip) tas2562 driver. The tas2562_volume_control_put() function lacks proper validation of control values provided by userspace. A local attacker could exploit this by supplying a specially crafted value, leading to an array overflow and an uncontrolled write to the device. This could result in privilege escalation or a denial of service.

A flaw of moderate impact was found in the Linux kernel ASoC tas2562 audio codec driver. The tas2562_volume_control_put() function does not validate the control value written by userspace before using it to look up an entry in a fixed-size array, which can be overflowed, and then writes whatever value it gets back to the device. A local attacker with low privileges could exploit this flaw by supplying a specially crafted volume control value, resulting in an out-of-bounds array access and an uncontrolled write to the audio device, which could cause a denial of service. Red Hat rated this flaw as Moderate impact (CVSS 5.5, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), which is lower than the upstream CVEORG rating of Important (CVSS 7.8), because Red Hat assessed the impact as limited to availability, with the unvalidated lookup result written to the audio codec device rather than a proven arbitrary kernel memory write. All Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel and kernel-rt streams currently recorded for this flaw have been assessed as not affected because the vulnerable code is not present in those builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.