CVE-2026-97910: Linux 5.2

Affected technology

Linux · cce1396936ef2b347d622b4d49718818eb32029d to before 2fada8276117215407afd1f59de5d2fe22aff01f, cce1396936ef2b347d622b4d49718818eb32029d to before ad796a1bc1875da2ebb616ea9bc1f2994273fd02, cce1396936ef2b347d622b4d49718818eb32029d to before 2e27144ba4b98bb3eb14aaccd4b088e2e69844e3, cce1396936ef2b347d622b4d49718818eb32029d to before 1467e3989c6edf79d3898c78aa47027f31ee5acb, cce1396936ef2b347d622b4d49718818eb32029d to before 38a9bb5221bcdece5507299f739c6751d8fc16b2, cce1396936ef2b347d622b4d49718818eb32029d to before ff63b0adc4f6a5b61c8393d204fac44c594c4d39, cce1396936ef2b347d622b4d49718818eb32029d to before 8064b73997f137c00a7e2e38295a763f9423928b, cce1396936ef2b347d622b4d49718818eb32029d to before 7a4ce92d150b9e7ecf1a710a34d8cdeb590d3751
Linux

Linux · 5.2
Linux

Component: Not specified by the source
File: sound/soc/sprd/sprd-pcm-compress.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source says the compress core only checks fragment_size * fragments for an u32 overflow in snd_compress_check_input(), so a local user can configure a logical buffer of up to ~4GB via SNDRV_COMPRESS_SET_PARAMS, far exceeding the fixed allocations. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.