Riskcovery

CVE-2026-64486

ALSA: cmipci: check snd_ctl_new1() return value

State
Published
Severity
Not scored
Published
Jul 25, 2026
Updated
Aug 17, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: cmipci: check snd_ctl_new1() return value

snd_ctl_new1() can return NULL when memory allocation fails. snd_cmipci_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference.

Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3454490e0396191f8f9c215fccf5deef76abffb5 to before b44888c33c4f11277d0e5e023338f2740232a4edAffected
  • f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 to before 8825a06bfa7932a7a74dec01669d405df0b47286Affected
  • f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 to before 4dd5b0b1a52a8d6e59a3f217204817228ce0238bAffected
  • f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 to before af2b009b773bc42995546507963e5e78970dc3edAffected
  • f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 to before 67e9ea92cd598cba1783ff701553c776a6cedee9Affected
  • f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 to before c205bd1b28fb7e5f1061a4e78813fad7d315cb3eAffected
  • 7bf12707fa3db4c14fbe8ab93efb421d8ca93bf8Affected
  • 6.1.34 to before 6.1.178Affected
  • 6.3.8 to before 6.4Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.1.178 through 6.1.*Not affected
  • 6.6.145 through 6.6.*Not affected
  • 6.12.96 through 6.12.*Not affected
  • 6.18.39 through 6.18.*Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.