In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In… (CVE-2026-64041)
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In fs210x_effect_scene_info(), a string was copied like this: strscpy(DST, SRC, strlen(SRC) + 1); A buffer overflow would happen if strlen(SRC) >= sizeof(DST). Actually, strscpy() must be used this way: strscpy(DST, SRC, sizeof(DST)); strscpy(DST, SRC); // defaults to sizeof(DST)
AI Analysis
Technical Summary
The vulnerability in the Linux kernel ASoC codec driver fs210x was due to incorrect usage of the strscpy() function in the fs210x_effect_scene_info() function. Specifically, the code used strscpy(DST, SRC, strlen(SRC) + 1), which can cause a buffer overflow if the source string length is greater than or equal to the size of the destination buffer DST. The correct usage is to pass the size of the destination buffer to strscpy(), ensuring no overflow occurs. This vulnerability has been resolved by fixing the strscpy() call to use the destination buffer size as the length parameter.
Potential Impact
A buffer overflow in kernel code can lead to memory corruption, potentially causing system instability or enabling privilege escalation. However, no known exploits are reported in the wild for this vulnerability. The impact is limited to systems running the affected Linux kernel code with the vulnerable ASoC fs210x codec driver.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel source code by correcting the strscpy() usage. Users and administrators should update their Linux kernel to a version that includes this fix. Since this is a kernel-level vulnerability, applying the official kernel update or patch from the Linux kernel maintainers is the recommended remediation. Patch status is not explicitly stated here; check the Linux kernel vendor advisory or source repository for the exact fixed version and update accordingly.
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In… (CVE-2026-64041)
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In fs210x_effect_scene_info(), a string was copied like this: strscpy(DST, SRC, strlen(SRC) + 1); A buffer overflow would happen if strlen(SRC) >= sizeof(DST). Actually, strscpy() must be used this way: strscpy(DST, SRC, sizeof(DST)); strscpy(DST, SRC); // defaults to sizeof(DST)
CVSS v3.1
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel ASoC codec driver fs210x was due to incorrect usage of the strscpy() function in the fs210x_effect_scene_info() function. Specifically, the code used strscpy(DST, SRC, strlen(SRC) + 1), which can cause a buffer overflow if the source string length is greater than or equal to the size of the destination buffer DST. The correct usage is to pass the size of the destination buffer to strscpy(), ensuring no overflow occurs. This vulnerability has been resolved by fixing the strscpy() call to use the destination buffer size as the length parameter.
Potential Impact
A buffer overflow in kernel code can lead to memory corruption, potentially causing system instability or enabling privilege escalation. However, no known exploits are reported in the wild for this vulnerability. The impact is limited to systems running the affected Linux kernel code with the vulnerable ASoC fs210x codec driver.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel source code by correcting the strscpy() usage. Users and administrators should update their Linux kernel to a version that includes this fix. Since this is a kernel-level vulnerability, applying the official kernel update or patch from the Linux kernel maintainers is the recommended remediation. Patch status is not explicitly stated here; check the Linux kernel vendor advisory or source repository for the exact fixed version and update accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-ffh9-3r79-5q5h
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64041"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27a92a4a8d598912cbbb
Added to database: 07/19/2026, 19:38:17 UTC
Last enriched: 07/19/2026, 19:55:30 UTC
Last updated: 07/20/2026, 19:41:22 UTC
Views: 12
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.