EUVD-2026-59441
GHSA-wv7f-69g8-fhc5
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Local vector confirmed by ALSA control write requirement; PR:L because audio group membership suffices; C:H for OOB kernel read, A:H for potential panic.
Primary rating from Vendor (Linux).
CVSS VectorVendor: Linux
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Lifecycle Timeline
5DescriptionCVE.org
In the Linux kernel, the following vulnerability has been resolved:
ASoC: meson: aiu: Validate written enum values
The AIU HDMI and internal codec mux put callbacks use the written enum value with snd_soc_enum_item_to_val() before checking whether the value is valid for the enumeration.
Reject out-of-range values before converting the enum item, matching the validation already done by the G12A HDMI and internal codec mux controls.
AnalysisAI
Missing input validation in the Linux kernel's ASoC Meson AIU audio driver allows a local low-privileged attacker to supply out-of-range enum values to HDMI and internal codec mux put callbacks, triggering snd_soc_enum_item_to_val() on unvalidated input and resulting in out-of-bounds kernel memory access. Systems running Linux 5.7 through pre-7.1.5 on Amlogic Meson SoC hardware are affected, with potential for high confidentiality impact (kernel memory disclosure), limited integrity impact, and kernel crash (availability). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a local authenticated session (PR:L) on a Linux system running on Amlogic Meson SoC hardware with the snd-soc-meson-aiu kernel module loaded and active. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk is moderate despite the CVSS base score of 7.3. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A local attacker with a low-privilege shell on an Amlogic Meson-based embedded Linux system - such as an Android TV device or media server - writes a crafted out-of-range integer to the AIU HDMI mux ALSA control node, bypassing the missing bounds check and triggering snd_soc_enum_item_to_val() on an invalid enum index. This causes the kernel to read memory outside the intended enum value table, potentially leaking kernel address space contents or triggering a NULL/wild pointer dereference that panics the kernel. … |
| Remediation | The primary remediation is to upgrade to Linux kernel 7.1.5 or later (stable), or to Linux 7.2-rc1 or later (mainline), which include the validated enum-check logic matching the G12A control pattern. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct inventory of systems running Linux kernel 5.7 through 7.1.4 on Amlogic Meson SoC hardware and verify whether unprivileged users have access to ALSA audio devices (/dev/snd/*); if so, immediately restrict device permissions to trusted users only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today