CVE-2026-72415: ASoC: SDCA: Validate written enum value in ge_put_enum_double()
In the Linux kernel, the following vulnerability has been resolved:
ASoC: SDCA: Validate written enum value in geputenumdouble()
geputenumdouble() passes the user-supplied enumeration index item[0] to sndsocenumitemtoval() without checking it against the number of items in the enum:
ret = sndsocenumitemtoval(e, item[0]);
sndsocenumitemtoval() indexes the heap-allocated e->values[] array with that index (e->values is set from a devmkcalloc() of e->items entries), so a control write with an out-of-range item[0] reads past the end of the values buffer. The bounds check in sndsocdapmputenumdouble() only runs afterwards, so it does not prevent the read here.
Reject an out-of-range item before using it, matching the other enum put handlers.
This issue was pointed out by the Sashiko AI review bot while reviewing a related enum-validation series: https://lore.kernel.org/all/20260609125735.CEB651F00893@smtp.kernel.org/