CVE-2026-64041: ASoC: codecs: fs210x: fix possible buffer overflow
Published Jul 19, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: fs210x: fix possible buffer overflow
In fs210xeffectsceneinfo(), a string was copied like this:
strscpy(DST, SRC, strlen(SRC) + 1);
A buffer overflow would happen if strlen(SRC) >= sizeof(DST). Actually, strscpy() must be used this way:
strscpy(DST, SRC, sizeof(DST)); strscpy(DST, SRC); // defaults to sizeof(DST)
Affected Software
7 affected components
Linux Linux kernel
Linux Linux kernel>=6.18<6.18.34
Linux Linux kernel>=6.19<7.0.11
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3
Linux Linux kernel=7.1-rc4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In fs210x_effect_scene_info(), copy the string with strscpy(DST, SRC, sizeof(DST)) so the destination buffer size is explicitly enforced.
Event History
Jul 19, 2026
CVE Published
via MITRE·03:39 PM
Data Sourced
via MITRE·03:39 PM
DescriptionSeverity
Data Sourced
via NVD·04:17 PM
RemedyDescriptionSeverityWeaknessAffected Software