This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-64041 →
DEBIAN-CVE-2026-64041
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In fs210x_effect_scene_info()...
Original description
The description as published by the source.
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In fs210x_effect_scene_info(), a string was copied like this: strscpy(DST, SRC, strlen(SRC) + 1); A buffer overflow would happen if strlen(SRC) >= sizeof(DST). Actually, strscpy() must be used this way: strscpy(DST, SRC, sizeof(DST)); strscpy(DST, SRC); // defaults to sizeof(DST)
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:14
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.12-1"}]}]
References
- advisory security-tracker.debian.org