Critical Vulnerability in Linux Package: ASoC Codec Access Overflow
Summary
DEBIAN-CVE-2026-80583: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses The "DEC0 MODE" to "DEC7 MODE" controls are enumerated, but tx_macro_dec_mode_get() and tx_macr... Affects linux versions 6.1.106-1 – 7.2~rc7-1~exp1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management, process scheduling, and system security. It supports a wide range of devices and architectures, making it a fundamental part of both server and desktop environments. The recent vulnerability affects the ASoC (ALSA System on Chip) codecs, specifically in the handling of enumerated controls, which could lead to access overflow issues.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the ASoC codecs related to the tx_macro_dec_mode_get() and tx_macro_dec_mode_put() functions. These functions incorrectly access enumerated control values, leading to potential access overflow. This oversight can cause system instability, as it allows for writing beyond the intended memory bounds, which could result in unexpected behavior or crashes. The issue was previously addressed in similar drivers, but the tx-macro was overlooked, making it a critical concern for users of affected systems.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the affected ASoC codec controls until a patch is applied. This can be done by modifying the configuration files or using system commands to disable specific controls related to the tx-macro.
Conclusion
The vulnerability in the Linux kernel's ASoC codecs presents a significant risk due to improper handling of enumerated controls, leading to potential access overflow. Users are strongly advised to update their systems to the latest patched version to mitigate this risk. For those unable to update immediately, disabling the affected controls can serve as a temporary measure.
See every vulnerability recorded for linux →
FAQ
The CVSS score of this vulnerability is 7.8, indicating a high severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability could lead to system instability, crashes, or unexpected behavior due to memory access violations.
Yes, the vulnerability affects multiple versions of the Linux package in Debian distributions, including Debian 12, 13, and 14.
If an immediate update is not possible, consider disabling the affected codec controls as a temporary workaround.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
