CVE-2026-64041 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In fs210x_effect_scene_info(), a string was copied like this: strscpy(DST, SRC, strlen(SRC) + 1); A buffer overflow would happen if strlen(SRC) >= sizeof(DST). Actually, strscpy() must be used this way: strscpy(DST, SRC, sizeof(DST)); strscpy(DST, SRC); // defaults to sizeof(DST)

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/0d435a7ebcd4e97e47673c1ab6fb27f973a053ec
https://git.kernel.org/stable/c/1ddf678bb75b6383c775ece61d40956c441d8a26
https://git.kernel.org/stable/c/6daefdf1cd3c56483f61970a76c0ad6028e4118f

History

Sun, 19 Jul 2026 16:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In fs210x_effect_scene_info(), a string was copied like this: strscpy(DST, SRC, strlen(SRC) + 1); A buffer overflow would happen if strlen(SRC) >= sizeof(DST). Actually, strscpy() must be used this way: strscpy(DST, SRC, sizeof(DST)); strscpy(DST, SRC); // defaults to sizeof(DST)
Title		ASoC: codecs: fs210x: fix possible buffer overflow
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/0d435a7ebcd4e97e47673c1ab6fb27f973a053ec https://git.kernel.org/stable/c/1ddf678bb75b6383c775ece61d40956c441d8a26 https://git.kernel.org/stable/c/6daefdf1cd3c56483f61970a76c0ad6028e4118f

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-19T15:39:27.967Z

Updated: 2026-07-19T15:39:27.967Z

Reserved: 2026-07-19T07:54:57.029Z

Link: CVE-2026-64041

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-64041", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.029Z", "datePublished": "2026-07-19T15:39:27.967Z", "dateUpdated": "2026-07-19T15:39:27.967Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-19T15:39:27.967Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: fs210x: fix possible buffer overflow\n\nIn fs210x_effect_scene_info(), a string was copied like this:\n\n strscpy(DST, SRC, strlen(SRC) + 1);\n\nA buffer overflow would happen if strlen(SRC) >= sizeof(DST).\nActually, strscpy() must be used this way:\n\n strscpy(DST, SRC, sizeof(DST));\n strscpy(DST, SRC); // defaults to sizeof(DST)"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/codecs/fs210x.c"], "versions": [{"version": "75611770177965ae902c87c96eace07542beff07", "lessThan": "1ddf678bb75b6383c775ece61d40956c441d8a26", "status": "affected", "versionType": "git"}, {"version": "75611770177965ae902c87c96eace07542beff07", "lessThan": "6daefdf1cd3c56483f61970a76c0ad6028e4118f", "status": "affected", "versionType": "git"}, {"version": "75611770177965ae902c87c96eace07542beff07", "lessThan": "0d435a7ebcd4e97e47673c1ab6fb27f973a053ec", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/codecs/fs210x.c"], "versions": [{"version": "6.18", "status": "affected"}, {"version": "0", "lessThan": "6.18", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.34", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.11", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "6.18.34"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "7.0.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/1ddf678bb75b6383c775ece61d40956c441d8a26"}, {"url": "https://git.kernel.org/stable/c/6daefdf1cd3c56483f61970a76c0ad6028e4118f"}, {"url": "https://git.kernel.org/stable/c/0d435a7ebcd4e97e47673c1ab6fb27f973a053ec"}], "title": "ASoC: codecs: fs210x: fix possible buffer overflow", "x_generator": {"engine": "bippy-1.2.0"}}}}