An input validation flaw in the Linux kernel audio subsystem may allow a local attacker to cause memory corruption and system instability.

This is a boundary check vulnerability in the simple_mux_control_put function. The flaw allows an authenticated local user to provide values that exceed the defined array bounds, potentially leading to unauthorized data access or system crashes.

The vulnerability, while requiring local access, poses a threat to system integrity and availability. By manipulating audio codec controls, an attacker could potentially induce system instability or bypass intended functionality. With a CVSS score of 7.1, it is categorized as high severity due to the potential for memory corruption.

Immediate Action: Update the Linux kernel to versions 5.15.210, 6.1.176, 6.6.143, 6.12.93, or later.

Proactive Monitoring: Audit access logs for unauthorized attempts to interact with audio control interfaces or abnormal system behavior following audio driver interactions.

Compensating Controls: Limit access to audio configuration interfaces and hardware control devices to authorized users only through standard Linux permission models.

Public Exploit Available: False

Organizations should ensure that kernels are updated to the specified patched versions to prevent potential local exploitation. While the requirement for local access mitigates the immediate remote risk, the potential for kernel-level memory corruption makes patching an essential maintenance task.