CVE-2026-74292 in Linux
Summary
by MITRE • 08/15/2026
In the Linux kernel, the following vulnerability has been resolved:
ASoC: tegra: tegra210_ahub: Validate written enum value
tegra_ahub_put_value_enum() reads e->values[item[0]] before
checking whether item[0] is within the enum item range. The existing
check therefore happens too late to prevent an out-of-range read of the values array.
Move the check before the array access.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 08/15/2026
The vulnerability described affects the linux kernel's sound subsystem particularly within the tegra audio hub driver for tegra210 platforms. This issue resides in the tegra_ahub_put_value_enum() function where a classic out-of-bounds memory access flaw occurs due to improper validation order. The flaw demonstrates a fundamental security weakness in input validation that could potentially allow attackers to manipulate audio hardware configurations through malformed enum values.
The technical implementation of this vulnerability stems from a sequence error in the validation logic where the code first accesses e->values[item[0]] array element before performing the range check on item[0]. This ordering creates a window where an attacker could provide an invalid enum index that exceeds the legitimate array bounds, resulting in memory corruption or information disclosure. The flaw is classified as a buffer overflow condition that violates standard security practices for input validation and memory access controls. According to CWE-129, this represents an implementation weakness where insufficient validation of the length or value of input data leads to improper access to memory locations.
The operational impact of this vulnerability extends beyond simple memory corruption as it affects the integrity of the audio subsystem on tegra210 devices. When exploited, the out-of-bounds read could potentially allow attackers to extract sensitive information from kernel memory spaces or cause system instability through memory corruption. The vulnerability particularly impacts systems using the tegra audio hub driver where audio configuration parameters are processed through the affected function. This type of flaw is classified under ATT&CK technique T1068 which involves exploiting vulnerabilities in operating system components to gain elevated privileges or access to sensitive data.
The fix for this vulnerability requires a simple but critical change in the validation sequence within the tegra_ahub_put_value_enum() function. Moving the range check before the array access eliminates the possibility of out-of-bounds memory operations and prevents potential exploitation. This remediation aligns with security best practices outlined in the CWE guidelines for preventing buffer overflows and maintaining proper input validation order. The solution demonstrates the importance of defensive programming techniques where validation occurs immediately prior to resource access rather than after, ensuring that all inputs are properly verified before any memory operations take place. The fix addresses the root cause by implementing proper bounds checking before array dereferencing, thereby preventing unauthorized memory access patterns that could lead to privilege escalation or system compromise.