CVE-2026-72302: ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc
In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: ipc3-control: Use overflow checks in controlupdate size calc
In sofipc3controlupdate(), the expectedsize calculation uses firmware-provided cdata->numelems in arithmetic that could overflow on 32-bit platforms, wrapping to a small value. This would allow the cdata->rhdr.hdr.size comparison to pass with mismatched sizes, potentially leading to out-of-bounds access in sndsofupdatecontrol.
Use checkmuloverflow() and checkaddoverflow() to detect and reject overflowed size calculations.