Vulnerability Bulletins

CVE-2026-74332

   
Affected software AMD
 
In the Linux kernel, the following vulnerability has been resolved:

ASoC: amd: acp-sdw-sof: Bound DAI link iteration

create_sdw_dailinks() walks sof_dais until it finds an entry with
initialised cleared, but sof_dais is allocated with exactly num_ends
entries. If all entries are initialised, the loop reads past the end of
the array.

Pass the allocated entry count to create_sdw_dailinks() and stop before
reading past the array.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-74332