CVE-2026-90196

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: validate topology volume range before allocation

SOF treats the topology mixer min and max values as non-negative indices

into its volume table. It stores them in signed fields, allocates max + 1

entries through an int argument, and later indexes the table with the

stored range.

An inverted range is invalid, while a maximum at or above INT_MAX cannot

be represented safely after the increment or in the signed fields.

Validate the complete range before storing it or allocating the table.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References