-

CVE-2026-64482

ALSA: gus: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved:

ALSA: gus: check snd_ctl_new1() return value

snd_ctl_new1() can return NULL when memory allocation fails.
snd_gf1_pcm_volume_control() does not check the return value before
dereferencing kctl->id.index, which can lead to a NULL pointer
dereference.

Add a NULL check after snd_ctl_new1() and return -ENOMEM if it fails.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version c35034fd6446afaf408d5ab296068e32c775c965
Version < 97f6bdf5d5ded2e37f358cacb5a95f1393356604
Status affected
Version c5ae57b1bb99bd6f50b90428fabde397c2aeba0f
Version < eccf8e91266e39f6f15637702a04a1d344833fe2
Status affected
Version c5ae57b1bb99bd6f50b90428fabde397c2aeba0f
Version < fc5d4f27ca1293bc1379ef8fff691c30d9803ca2
Status affected
Version c5ae57b1bb99bd6f50b90428fabde397c2aeba0f
Version < 5e74e5e8cb7cc25f7a89f59abaf3489bf0c6f4a0
Status affected
Version c5ae57b1bb99bd6f50b90428fabde397c2aeba0f
Version < 465075c6835103821d725c13f8c545898e5f2636
Status affected
Version c5ae57b1bb99bd6f50b90428fabde397c2aeba0f
Version < c7fa99d30c7a166a5e5db5a585ce7501ff68326b
Status affected
Version a1374d2683442633f8ad2169f8f31df45048e008
Status affected
Version 6.1.34
Version < 6.1.178
Status affected
Version 6.3.8
Version < 6.4
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.4
Status affected
Version 0
Version < 6.4
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.96
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.4
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.079
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/97f6bdf5d5ded2e37f358cacb5a95f1393356604
https://git.kernel.org/stable/c/eccf8e91266e39f6f15637702a04a1d344833fe2
https://git.kernel.org/stable/c/fc5d4f27ca1293bc1379ef8fff691c30d9803ca2
https://git.kernel.org/stable/c/5e74e5e8cb7cc25f7a89f59abaf3489bf0c6f4a0
https://git.kernel.org/stable/c/465075c6835103821d725c13f8c545898e5f2636
https://git.kernel.org/stable/c/c7fa99d30c7a166a5e5db5a585ce7501ff68326b