CVE Catalog

CVE-2026-74292

HighCVSS 7.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.13%

3th percentile - higher than 3% of all known CVEs

Summary

In the Linux kernel, the ASoC driver for Tegra210 AHUB has function tegra_ahub_put_value_enum() that reads e->values[item[0]] before checking if item[0] is within range. This allows an out-of-range read of the values array.

Risk Assessment

Out-of-range read may lead to data disclosure or system crash.

Recommendation

Apply the Linux kernel patch that moves the range check before the array access.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210_ahub: Validate written enum value tegra_ahub_put_value_enum() reads e->values[item[0]] before checking whether item[0] is within the enum item range. The existing check therefore happens too late to prevent an out-of-range read of the values array. Move the check before the array access.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS