CVE-2026-64041 - ASoC: codecs: fs210x: fix possible buffer overflow

HIGH

ASoC: codecs: fs210x: fix possible buffer overflow

Published Jul 19, 2026

7.8

HIGH

CVSS 3.1

EPSS 0.19%

In fs210x_effect_scene_info(), a string was copied like this:

strscpy(DST, SRC, strlen(SRC) + 1);

A buffer overflow would happen if strlen(SRC) >= sizeof(DST). Actually, strscpy() must be used this way:

strscpy(DST, SRC, sizeof(DST)); strscpy(DST, SRC); // defaults to sizeof(DST)

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

No remediation recorded yet.

Weaknesses (2)

CWE-120

Classic Buffer Overflow

CWE-787

Out-of-bounds Write

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-64041		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2502608		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45614		Advisory
https://git.kernel.org/stable/c/0d435a7ebcd4e97e47673c1ab6fb27f973a053ec
https://git.kernel.org/stable/c/1ddf678bb75b6383c775ece61d40956c441d8a26
https://git.kernel.org/stable/c/6daefdf1cd3c56483f61970a76c0ad6028e4118f
https://lore.kernel.org/linux-cve-announce/2026071906-CVE-2026-64041-c0ad@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-64041
https://www.cve.org/CVERecord?id=CVE-2026-64041