What is the CVSS score of EUVD-2026-45614?

EUVD-2026-45614 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by EUVD-2026-45614?

An audio driver vulnerability in recent Linux kernel versions exposes multi-user and containerized systems to privilege escalation attacks by local users, potentially compromising system integrity…. A patch is available.

How to fix or mitigate EUVD-2026-45614?

Within 24 hours, identify all Linux systems running kernel versions 6.18 or later with the ASoC fs210x audio driver enabled. Within 7 days, begin deploying vendor-released kernel patches to affected systems using your established change management process. Complete full remediation across your fleet by day 30, prioritizing production systems and multi-user environments with untrusted local user access.

Linux Kernel EUVD-2026-45614

| CVE-2026-64041 HIGH

2026-07-19 Linux

GHSA-ffh9-3r79-5q5h

Buffer Overflow Linux

7.8

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local low-privileged user triggers a kernel out-of-bounds write via the ASoC control path, giving memory corruption with potential full CIA impact; no remote vector.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

HIGH

qualitative

Red Hat

7.0 MEDIUM

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 20, 2026 - 17:03 vuln.today

CVSS changed

Jul 20, 2026 - 15:22 NVD

7.8 (HIGH)

Patch available

Jul 19, 2026 - 17:03 EUVD

CVE Published

Jul 19, 2026 - 15:39 cve.org

HIGH 7.8

CVE Published

Jul 19, 2026 - 15:39 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: fs210x: fix possible buffer overflow

In fs210x_effect_scene_info(), a string was copied like this:

strscpy(DST, SRC, strlen(SRC) + 1);

A buffer overflow would happen if strlen(SRC) >= sizeof(DST). Actually, strscpy() must be used this way:

strscpy(DST, SRC, sizeof(DST)); strscpy(DST, SRC); // defaults to sizeof(DST)

AnalysisAI

Local privilege escalation and memory corruption in the Linux kernel's ASoC fs210x audio codec driver arises from a misused strscpy() call in fs210x_effect_scene_info(), where the copy length was derived from the source string (strlen(SRC)+1) rather than the destination buffer size, allowing an overwrite when the source is at least as long as the destination. The flaw affects Linux 6.18 through the fixed stable releases and carries a CVSS of 7.8 with high confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis, and EPSS is low at 0.21% (12th percentile), consistent with a local-only kernel driver bug rather than a mass-exploited network flaw.

Technical ContextAI

The affected component is the ASoC (ALSA System on Chip) codec driver 'fs210x', a kernel-space driver for a Foursemi audio amplifier/codec. The root cause is incorrect use of the kernel's strscpy() helper: the code passed strlen(SRC)+1 as the size argument, which sizes the copy to the source length instead of bounding it to sizeof(DST). When the source string length meets or exceeds the destination buffer size, bytes are written past the destination boundary. This is a classic out-of-bounds write / buffer overflow (aligns with CWE-787 Out-of-bounds Write / CWE-120, though the CWE was recorded as N/A). The correct idiom, as noted in the fix, is strscpy(DST, SRC, sizeof(DST)) or the two-argument strscpy(DST, SRC) which defaults to sizeof(DST) and guarantees NUL-termination without overrun.

RemediationAI

Apply the vendor-released patch by upgrading to a fixed Linux kernel: 6.18.34 for the 6.18 stable series, 7.0.11 for the 7.0 series, or 7.1 mainline, or backport the upstream fix commits (git.kernel.org/stable/c/1ddf678bb75b6383c775ece61d40956c441d8a26 and the companion commits 6daefdf1cd3c56483f61970a76c0ad6028e4118f and 0d435a7ebcd4e97e47673c1ab6fb27f973a053ec). If immediate patching is not possible, the primary compensating control is to avoid loading the fs210x codec module on systems that do not require this Foursemi audio hardware (blacklist the module in modprobe), which removes the vulnerable code path entirely at the cost of disabling that audio device; because exploitation requires local access, also restrict local/physical access and limit which users can interact with the ALSA/ASoC control interfaces. Confirm your distribution's backported kernel package includes the fix before relying on a vendor kernel version number.

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2020-0796 CRITICAL POC

10.0

CVE-2019-11043 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Important

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

EUVD-2026-45614 vulnerability details – vuln.today

Back

Linux Kernel EUVD-2026-45614

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same technique Buffer Overflow

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code