Memory Disclosure Vulnerability in Intel Digital Audio Interface Driver

CVE-2026-12232

What is CVE-2026-12232?

The Intel ALH digital-audio-interface driver contains a serious vulnerability due to insufficient validation of the caller-supplied stream_id parameter in the dai_alh_get_properties() function. This flaw can lead to an out-of-bounds read, allowing attackers to disclose sensitive kernel memory by leveraging arbitrary offsets. Specifically, a user-mode thread with access to the ALH DAI device can exploit this issue by providing out-of-range stream_id values, leading to potential information leakage or local denial of service through unmapped page faults. It is imperative to ensure proper validation to mitigate these risks.

References