What is CVE-2026-80910?

CVE-2026-80910 is a unscored severity Linux kernel vulnerability, affecting Linux kernel versions from 5.11 onward and patched in 5.15.217, 6.1.184, 6.6.153 and others. CVE-2026-80910 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-80910?

CVE-2026-80910 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-80910?

Yes, CVE-2026-80910 has been patched. Fixed versions include 5.15.217, 6.1.184, 6.6.153 and others. If you are running Linux kernel 5.11 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-80910 actively exploited?

CVE-2026-80910 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-80910

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four "WSA RX* Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol->value.integer.value[0] (a long) instead of ucontrol->value.enumerated.item[0] (an unsigned int). This same pattern was fixed in the sibling drivers by commit bcfe5f76cc40 ("ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type") and commit 0ea5eff7c606 ("ASoC: codecs: va-macro: fix accessing array out of bounds for enum type"), but wsa-macro was missed. On 64-bit kernels with CONFIG_SND_CTL_DEBUG this trips the elem value sanity check and every read of these controls fails with -EINVAL.

Package Linux Kernel

Published 2026-09-04

Last modified 2026-09-04

Patch available

Yes

Affected versions

Linux kernel versions 5.11 and later are affected. Fixed in 5.15.217, 6.1.184, 6.6.153, 6.12.105, 6.18.46, 7.1.10, 7.2 and their respective stable series.

Affected from

≥ 5.11

Fixed in

✓ 5.15.217 5.15.x ✓ 6.1.184 6.1.x ✓ 6.6.153 6.6.x ✓ 6.12.105 6.12.x ✓ 6.18.46 6.18.x ✓ 7.1.10 7.1.x ✓ 7.2

References

7 total

Showing 5 of 7 references View all on NVD

Frequently asked questions

What is CVE-2026-80910?

CVE-2026-80910 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 5.11 onward and has been patched in 5.15.217, 6.1.184, 6.6.153 and others. CVE-2026-80910 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-80910?

Yes. CVE-2026-80910 has been patched. Fixed versions include 5.15.217, 6.1.184, 6.6.153 and others. If you are running Linux kernel 5.11 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-80910 actively exploited?

No. CVE-2026-80910 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.