CVE-2026-80910 ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
Local attackers can cause audio control failures in the Linux kernel when debug configurations are enabled due to incorrect enum access types.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-80910?
CVE-2026-80910 is a vulnerability in Linux, published on 4 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
EAR SPKR PA Gain" and the four "WSA RX* Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol->value.integer.value[0] (a long) instead of ucontrol->value.enumerated.item[0] (an unsigned int).
This same pattern was fixed in the sibling drivers by commit bcfe5f76cc40 ("ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type") and commit 0ea5eff7c606 ("ASoC: codecs: va-macro: fix accessing array out of bounds for enum type"), but wsa-macro was missed.
On 64-bit kernels with CONFIG_SND_CTL_DEBUG this trips the elem value sanity check and every read of these controls fails with -EINVAL.
Which versions are affected by CVE-2026-80910?
How do I fix CVE-2026-80910?
Apply the vendor's patch.
Is CVE-2026-80910 being exploited?
There is no known exploitation of CVE-2026-80910 in the wild and no public exploit code.
Sources
Also known as AZL-99549, BELL-CVE-2026-80910, DEBIAN-CVE-2026-80910, GHSA-5q4c-hcqg-2qj6, UBUNTU-CVE-2026-80910.