CVE-2026-68348

CVE-2026-68348 affects the Linux kernel ASoC TAS2781 firmware parser. The vulnerability arises when the parser reads variable-length description strings with strlen() before confirming a NUL terminator exists inside the firmware blob, which can allow the parser to walk past the end of the firmwar...