0.0
NA
CVE-2026-74292
ASoC: tegra: tegra210_ahub: Validate written enum value
Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210_ahub: Validate written enum value tegra_ahub_put_value_enum() reads e->values[item[0]] before checking whether item[0] is within the enum item range. The existing check therefore happens too late to prevent an out-of-range read of the values array. Move the check before the array access.

INFO

Published Date :

Aug. 15, 2026, 6:22 a.m.

Last Modified :

Aug. 15, 2026, 6:22 a.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2026-74292 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

No affected product recoded yet

Solution
Validate enum values before array access to prevent out-of-bounds reads.
  • Move enum bounds check before array access.
  • Review and validate all enum value accesses.
  • Apply vendor-provided kernel updates.
  • Test thoroughly after applying patches.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-74292 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-74292 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-74292 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2026-74292 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Aug. 15, 2026

    Action Type Old Value New Value
    Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '16e1bcc2caf446fa3e1daa040b59fd6f6272a766', 'lessThan': '4e45e4c2015519a39c40eb575c03b77807fb5080', 'versionType': 'git'}, {'status': 'affected', 'version': '16e1bcc2caf446fa3e1daa040b59fd6f6272a766', 'lessThan': '964f8f9015fb117402d8d2186593397cd93388e9', 'versionType': 'git'}, {'status': 'affected', 'version': '16e1bcc2caf446fa3e1daa040b59fd6f6272a766', 'lessThan': '2ec7d16fe21c68b0879873a2abf9aac854c96134', 'versionType': 'git'}, {'status': 'affected', 'version': '16e1bcc2caf446fa3e1daa040b59fd6f6272a766', 'lessThan': '4bcb23635d5059ee71f3fb89719ea14aada6fd59', 'versionType': 'git'}, {'status': 'affected', 'version': '16e1bcc2caf446fa3e1daa040b59fd6f6272a766', 'lessThan': 'f67d63628fe158b3a6e6b33a2b8c83ff118699d1', 'versionType': 'git'}, {'status': 'affected', 'version': '16e1bcc2caf446fa3e1daa040b59fd6f6272a766', 'lessThan': 'e098c9c6477dfa3cb363282100108484ceba5cc5', 'versionType': 'git'}, {'status': 'affected', 'version': '16e1bcc2caf446fa3e1daa040b59fd6f6272a766', 'lessThan': '226d93b65f4f99b35fb7a03bdb24acb577364ebc', 'versionType': 'git'}, {'status': 'affected', 'version': '16e1bcc2caf446fa3e1daa040b59fd6f6272a766', 'lessThan': '1d8aabb413b5638670dfd1162169edc0ba276a2e', 'versionType': 'git'}], 'programFiles': ['sound/soc/tegra/tegra210_ahub.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.9'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.9', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.261', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.212', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.178', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.145', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.97', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['sound/soc/tegra/tegra210_ahub.c'], 'defaultStatus': 'affected'}]
    Added Description In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210_ahub: Validate written enum value tegra_ahub_put_value_enum() reads e->values[item[0]] before checking whether item[0] is within the enum item range. The existing check therefore happens too late to prevent an out-of-range read of the values array. Move the check before the array access.
    Added Reference https://git.kernel.org/stable/c/1d8aabb413b5638670dfd1162169edc0ba276a2e
    Added Reference https://git.kernel.org/stable/c/226d93b65f4f99b35fb7a03bdb24acb577364ebc
    Added Reference https://git.kernel.org/stable/c/2ec7d16fe21c68b0879873a2abf9aac854c96134
    Added Reference https://git.kernel.org/stable/c/4bcb23635d5059ee71f3fb89719ea14aada6fd59
    Added Reference https://git.kernel.org/stable/c/4e45e4c2015519a39c40eb575c03b77807fb5080
    Added Reference https://git.kernel.org/stable/c/964f8f9015fb117402d8d2186593397cd93388e9
    Added Reference https://git.kernel.org/stable/c/e098c9c6477dfa3cb363282100108484ceba5cc5
    Added Reference https://git.kernel.org/stable/c/f67d63628fe158b3a6e6b33a2b8c83ff118699d1
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.