CVE-2026-72302

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc

In sofipc3controlupdate(), the expectedsize calculation uses firmware-provided cdata->numelems in arithmetic that could overflow on 32-bit platforms, wrapping to a small value. This would allow the cdata->rhdr.hdr.size comparison to pass with mismatched sizes, potentially leading to out-of-bounds access in sndsofupdatecontrol.

Use checkmuloverflow() and checkaddoverflow() to detect and reject overflowed size calculations.