Vulnerability in Linux Kernel's Simple Multiplexer Driver

CVE-2026-64243

What is CVE-2026-64243?

The Linux Kernel, specifically within the simple multiplexer driver, contains a vulnerability that arises from improper input validation in the enum control bounds check. The function simple_mux_control_put() was incorrectly allowing values greater than the defined maximum, leading to potential invalid mux states. This flaw could result in erroneous values being passed to the GPIO setter and subsequently utilized in the DAPM mux update path. To rectify this, an enforcement of a bounds check (>= e->items) consistent with ASoC enum helpers has been implemented, ensuring that only valid control values are processed, thereby mitigating the risk of system instability.

References