CVE-2026-68348

A flaw was found in the Linux kernel's ASoC TAS2781 firmware parser. This vulnerability occurs when the parser reads variable-length description strings without properly checking for a null terminator within the firmware blob. A specially crafted, malformed firmware image could allow an attacker ...

CVE-2026-68348

In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2781: bound firmware description string parsing The TAS2781 firmware parser reads several variable-length description strings with strlen before checking that the string terminator is present inside the firmware blob. A...

CVE-2026-68348 ASoC: tas2781: bound firmware description string parsing

In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2781: bound firmware description string parsing The TAS2781 firmware parser reads several variable-length description strings with strlen before checking that the string terminator is present inside the firmware blob. A...

PT-2026-69748

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The TAS2781 firmware parser in the ASoC ALSA System on Chip component uses strlen to read variable-length description strings without first verifying the presence of a NUL terminator...

UBUNTU-CVE-2024-42278

In the Linux kernel, the following vulnerability has been resolved: ASoC: TAS2781: Fix tasdevloadcalibrateddata This function has a reversed if statement so it's either a no-op or it leads to a NULL dereference...

CVE-2024-42278 ASoC: TAS2781: Fix tasdev_load_calibrated_data()

In the Linux kernel, the following vulnerability has been resolved: ASoC: TAS2781: Fix tasdevloadcalibrateddata This function has a reversed if statement so it's either a no-op or it leads to a NULL dereference...

CVE-2024-42278 ASoC: TAS2781: Fix tasdev_load_calibrated_data()

In the Linux kernel, the following vulnerability has been resolved: ASoC: TAS2781: Fix tasdevloadcalibrateddata This function has a reversed if statement so it's either a no-op or it leads to a NULL dereference...

SUSE SLED15: kernel-firmware / kernel-firmware-all / kernel-firmware-amdgpu / etc (SUSE-SU-2024:2785-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2785-1 advisory. Update to version 20240728: amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 Revert...