CVE-2026-64480

ALSA: ice1712: check snd_ctl_new1() return value

State: Published
Severity: Not scored
Published: Jul 25, 2026
Updated: Aug 17, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: ice1712: check snd_ctl_new1() return value

snd_ctl_new1() can return NULL when memory allocation fails. The ice1712 driver calls snd_ctl_new1() without checking the return value before dereferencing the pointer in multiple places (ice1712.c, ice1724.c, aureon.c), which can lead to NULL pointer dereferences.

Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0df0097ea2d52401c31e550389ac758c90e6a1eb to before 57d59be545b309d4bb54ac472b15d1e67f254d95Affected b9a4efd61b6b9f62f83752959e75a5dae20624fa to before 69bf1dfa3215524c4ae255bb9dce0770875abbebAffected b9a4efd61b6b9f62f83752959e75a5dae20624fa to before d34ad480b8896d2b486e2cf29ce1790326cad205Affected b9a4efd61b6b9f62f83752959e75a5dae20624fa to before 71b87108ad93d433cdb20704a8dc8852304cf2c2Affected b9a4efd61b6b9f62f83752959e75a5dae20624fa to before 38a7cc46370a57122fb29c4bfe48a851c0c64459Affected b9a4efd61b6b9f62f83752959e75a5dae20624fa to before 2b929b91b0f3bc6de8a844370049cd99ee8e31ffAffected 286e17a1c3baeb1b1cd36b63ee16e8a6e63d558eAffected 6.1.34 to before 6.1.178Affected 6.3.8 to before 6.4Affected
LinuxLinux	6.4Affected before 6.4Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.96 through 6.12.Not affected 6.18.39 through 6.18.Not affected 7.1.4 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

0df0097ea2d52401c31e550389ac758c90e6a1eb to before 57d59be545b309d4bb54ac472b15d1e67f254d95Affected
b9a4efd61b6b9f62f83752959e75a5dae20624fa to before 69bf1dfa3215524c4ae255bb9dce0770875abbebAffected
b9a4efd61b6b9f62f83752959e75a5dae20624fa to before d34ad480b8896d2b486e2cf29ce1790326cad205Affected
b9a4efd61b6b9f62f83752959e75a5dae20624fa to before 71b87108ad93d433cdb20704a8dc8852304cf2c2Affected
b9a4efd61b6b9f62f83752959e75a5dae20624fa to before 38a7cc46370a57122fb29c4bfe48a851c0c64459Affected
b9a4efd61b6b9f62f83752959e75a5dae20624fa to before 2b929b91b0f3bc6de8a844370049cd99ee8e31ffAffected
286e17a1c3baeb1b1cd36b63ee16e8a6e63d558eAffected
6.1.34 to before 6.1.178Affected
6.3.8 to before 6.4Affected

LinuxLinux

6.4Affected
before 6.4Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.96 through 6.12.*Not affected
6.18.39 through 6.18.*Not affected
7.1.4 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.