עברית

Vulnerability Intelligence

CVE-2026-74292

High 7.1

Published
Last modified
NVD status
Received

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210_ahub: Validate written enum value tegra_ahub_put_value_enum() reads e->values[item[0]] before checking whether item[0] is within the enum item range. The existing check therefore happens too late to prevent an out-of-range read of the values array. Move the check before the array access.

References8

Metrics

CVSS 3.1
7.1 HIGH Score source: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS — exploit probability
0% percentile: 6 · as of 11 November 2026

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.