The vulnerability in the ASoC lpass-wsa-macro driver causes the get and put callbacks to reference the wrong array element. Instead of using ucontrol->value.enumerated.item[0] for an enumerated control, the code accesses ucontrol->value.integer.value[0] as a long. This subtle type mis‑use triggers the kernel’s element value sanity check on 64‑bit builds with CONFIG_SND_CTL_DEBUG enabled, causing every attempt to read the affected audio controls to return -EINVAL. The failure blocks clients from retrieving accurate audio configuration data, effectively denying the service of these ALSA controls.

All Linux kernel builds that include the lpass‑wsa‑macro driver and are compiled for a 64‑bit architecture with CONFIG_SND_CTL_DEBUG enabled. Because no specific kernel versions are listed, any kernel that loads this module and processes the problematic controls during operation is potentially impacted.

The EPSS score is not available and the issue is not listed in the CISA KEV catalog, indicating no known public exploitation. The attack vector is inferred to be local: any user who can invoke ALSA control reads on the affected kernel will encounter repeated EINVAL errors. The vulnerability does not lead to arbitrary code execution or privilege escalation, so the overall risk is moderate, though it can disrupt audio functionality on affected systems.