High 7.3Published Aug 15, 2026

CVE-2026-74294ASoC: meson: aiu: Validate written enum values

Updated under an hour ago (Oct 26, 2026, 5:40 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: aiu: Validate written enum values The AIU HDMI and internal codec mux put callbacks use the written enum value with snd_soc_enum_item_to_val() before checking whether the value is valid for the enumeration. Reject out-of-range values before converting the enum item, matching the validation already done by the G12A HDMI and internal codec mux controls.

CVSS: 7.3 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 16, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from b82b734c0e9a75e1b956214ac523a8eb590f51f3 before 91797708f99e4a910ab019760069c0a7e00a6fc0; from b82b734c0e9a75e1b956214ac523a8eb590f51f3 before 90703664dbc5a4bf3d84f649404318f3cafdbe69; from b82b734c0e9a75e1b956214ac523a8eb590f51f3 before 8a6d6735e7c02e88841cca1497ff3d8089f2ef24; from b82b734c0e9a75e1b956214ac523a8eb590f51f3 before 96f5b92d958bc34500500f29fab8e0b908f25397; from b82b734c0e9a75e1b956214ac523a8eb590f51f3 before 0965892cc486ca554d72eeb62d85ccf8d0137a5a; from b82b734c0e9a75e1b956214ac523a8eb590f51f3 before d65adf85477247be04ac86886f8edfaa047b5d4a	CNA record

References

References

https://git.kernel.org/stable/c/91797708f99e4a910ab019760069c0a7e00a6fc0
https://git.kernel.org/stable/c/90703664dbc5a4bf3d84f649404318f3cafdbe69
https://git.kernel.org/stable/c/8a6d6735e7c02e88841cca1497ff3d8089f2ef24
https://git.kernel.org/stable/c/96f5b92d958bc34500500f29fab8e0b908f25397
https://git.kernel.org/stable/c/0965892cc486ca554d72eeb62d85ccf8d0137a5a
https://git.kernel.org/stable/c/d65adf85477247be04ac86886f8edfaa047b5d4a

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.