-

CVE-2026-64486

ALSA: cmipci: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved:

ALSA: cmipci: check snd_ctl_new1() return value

snd_ctl_new1() can return NULL when memory allocation fails.
snd_cmipci_spdif_controls() does not check the return value before
dereferencing kctl->id.device, which can lead to a NULL pointer
dereference.

Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any
fails.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 3454490e0396191f8f9c215fccf5deef76abffb5
Version < b44888c33c4f11277d0e5e023338f2740232a4ed
Status affected
Version f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9
Version < 8825a06bfa7932a7a74dec01669d405df0b47286
Status affected
Version f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9
Version < 4dd5b0b1a52a8d6e59a3f217204817228ce0238b
Status affected
Version f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9
Version < af2b009b773bc42995546507963e5e78970dc3ed
Status affected
Version f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9
Version < 67e9ea92cd598cba1783ff701553c776a6cedee9
Status affected
Version f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9
Version < c205bd1b28fb7e5f1061a4e78813fad7d315cb3e
Status affected
Version 7bf12707fa3db4c14fbe8ab93efb421d8ca93bf8
Status affected
Version 6.1.34
Version < 6.1.178
Status affected
Version 6.3.8
Version < 6.4
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.4
Status affected
Version 0
Version < 6.4
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.96
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.4
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.079
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/b44888c33c4f11277d0e5e023338f2740232a4ed
https://git.kernel.org/stable/c/8825a06bfa7932a7a74dec01669d405df0b47286
https://git.kernel.org/stable/c/4dd5b0b1a52a8d6e59a3f217204817228ce0238b
https://git.kernel.org/stable/c/af2b009b773bc42995546507963e5e78970dc3ed
https://git.kernel.org/stable/c/67e9ea92cd598cba1783ff701553c776a6cedee9
https://git.kernel.org/stable/c/c205bd1b28fb7e5f1061a4e78813fad7d315cb3e