Executive brief
A vulnerability was identified in the Linux kernel's audio driver for the pcm512x chipset. This component is responsible for managing audio hardware settings. An exploit could cause the system to crash (denial of service) when specific audio controls are adjusted, potentially impacting system stability and availability.
Technical details
A null pointer dereference exists in the pcm512x chipset driver within the pcm512x_overclock_xxx_put() functions. The root cause is the incorrect use of snd_soc_dapm_kcontrol_to_dapm() on a general mixer kcontrol, which is not a DAPM kcontrol. This leads to an invalid memory access when the kernel attempts to retrieve the DAPM context. An attacker with local access to modify mixer settings could trigger this vulnerability to cause a kernel oops or system crash. The fix involves switching to snd_soc_component_to_dapm() to correctly retrieve the context. Patches have been released for affected stable branches.
Affected products
- Linux Linux Kernel 6.19, 7.0.11, 7.1
Timeline
- 2026-05-21: patched: Initial fix commit authored
- 2026-07-19: disclosed: CVE published