asoc VolumeControl OOB

Vulnerability analysis

The volume control handler in the TAS2562 audio codec driver accepts a value from userspace and uses it directly as an index into a fixed-size lookup table without checking bounds. A sufficiently large value causes an out-of-bounds array read, and whatever value is retrieved is then written to the codec's hardware register, potentially causing unintended device behavior or a kernel error. The fix adds a bounds check that rejects out-of-range values before the array lookup. The vulnerable code path is reachable by any local user who can access the audio device and write ALSA mixer controls, which typically requires no special privileges on systems where the audio device node is world-accessible.