High 7.8Published Aug 15, 2026

CVE-2026-72488soundwire: fix bug in sdw_add_element_group_count found by syzkaller

Updated under an hour ago (Oct 28, 2026, 5:40 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_group_count found by syzkaller The original implementation caused an out-of-bounds memory access in the sdw_add_element_group_count for-loop when i == num. for (i = 0; i <= num; i++) { if (rate == group->rates[i] && lane == group->lanes[i]) ... To fix this error, the function now checks for existing rate/lane entries in the group(a function parameter) using a for-loop before adding them. No functional changes apart from this fix.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 9026118f20e28f202dab34f219bbb831ffb8c4dc before a2275dce05e6d1cce69bf68f23ea7a63c0c54bae; 9026118f20e28f202dab34f219bbb831ffb8c4dc builds before 5c3ce6d3559ce57e6c3108aa9ecf7b32764188c5; from 9026118f20e28f202dab34f219bbb831ffb8c4dc before a454f61747c97e2eadaa7a35ffc1f4b1645c6a53; from 9026118f20e28f202dab34f219bbb831ffb8c4dc before e483a406a23a92d5202e8d324f206e127eef48ff; from 9026118f20e28f202dab34f219bbb831ffb8c4dc before f772ff5a0e6758fd412803c09e03ba3bca5f5878	CNA record

References

References

https://git.kernel.org/stable/c/a2275dce05e6d1cce69bf68f23ea7a63c0c54bae
https://git.kernel.org/stable/c/5c3ce6d3559ce57e6c3108aa9ecf7b32764188c5
https://git.kernel.org/stable/c/a454f61747c97e2eadaa7a35ffc1f4b1645c6a53
https://git.kernel.org/stable/c/e483a406a23a92d5202e8d324f206e127eef48ff
https://git.kernel.org/stable/c/f772ff5a0e6758fd412803c09e03ba3bca5f5878

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.