-

CVE-2026-64488

ALSA: aoa: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved:

ALSA: aoa: check snd_ctl_new1() return value

snd_ctl_new1() can return NULL when memory allocation fails. In
layout.c, the function does not check the return value before
dereferencing ctl->id.name or passing to aoa_snd_ctl_add(), which can
lead to a NULL pointer dereference.

Add NULL checks after snd_ctl_new1() calls and return early if any
fails.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f3d9478b2ce468c3115b02ecae7e975990697f15
Version < b0154ebc6dc552c389a574b1e221d728e10346e7
Status affected
Version f3d9478b2ce468c3115b02ecae7e975990697f15
Version < d62624fe256b2d0d13454c78cbfc70ff5d954dc7
Status affected
Version f3d9478b2ce468c3115b02ecae7e975990697f15
Version < e5e8c4508d95af82f9b4d065f658e5476a8e9bc8
Status affected
Version f3d9478b2ce468c3115b02ecae7e975990697f15
Version < 2ee9c46fd2dcd529cef18e37636ee12f5c3dbedd
Status affected
Version f3d9478b2ce468c3115b02ecae7e975990697f15
Version < d73067e2bbf3775a495d9f38e38d0a3cf53ee790
Status affected
Version f3d9478b2ce468c3115b02ecae7e975990697f15
Version < fd786466889e4a6e6de0f4462bd0068edea63960
Status affected
Version f3d9478b2ce468c3115b02ecae7e975990697f15
Version < e47f2a341adbac001b6f5d0211b0cd1c1668637b
Status affected
Version f3d9478b2ce468c3115b02ecae7e975990697f15
Version < 8df560fefe6fed6a20b7e06720eeaeccec349ac0
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.18
Status affected
Version 0
Version < 2.6.18
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.4
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.083
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/b0154ebc6dc552c389a574b1e221d728e10346e7
https://git.kernel.org/stable/c/d62624fe256b2d0d13454c78cbfc70ff5d954dc7
https://git.kernel.org/stable/c/e5e8c4508d95af82f9b4d065f658e5476a8e9bc8
https://git.kernel.org/stable/c/2ee9c46fd2dcd529cef18e37636ee12f5c3dbedd
https://git.kernel.org/stable/c/d73067e2bbf3775a495d9f38e38d0a3cf53ee790
https://git.kernel.org/stable/c/fd786466889e4a6e6de0f4462bd0068edea63960
https://git.kernel.org/stable/c/e47f2a341adbac001b6f5d0211b0cd1c1668637b
https://git.kernel.org/stable/c/8df560fefe6fed6a20b7e06720eeaeccec349ac0