CVE-2026-64107: ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put()
In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512xoverclockxxxput()
In the pcm512x chipset driver, pcm512xoverclockxxxput() is defined as a general mixer kcontrol instead of a DAPM kcontrol, so struct sndsocdapmcontext must not be accessed via sndsocdapmkcontroltodapm().
This causes a NULL pointer dereference, so it must be modified to use sndsoccomponenttodapm().
Affected Software
Remediation
Event History
Frequently Asked Questions
Who can trigger the crash?
An attacker or local user needs local access and low privileges, as reflected by the CVSS vector. The affected path is in the PCM512x codec driver’s overclock mixer control handling.
What is the impact of successful exploitation?
Successful triggering causes a NULL pointer dereference, which can result in a denial of service. The supplied CVSS vector rates availability impact as high and does not indicate confidentiality or integrity impact.
Is a fix available?
Yes. A patch is available; the referenced stable kernel commits replace the invalid DAPM-context lookup with snd_soc_component_to_dapm().