-

CVE-2026-64489

ALSA: ymfpci: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved:

ALSA: ymfpci: check snd_ctl_new1() return value

snd_ctl_new1() can return NULL when memory allocation fails.
snd_ymfpci_create_spdif_controls() does not check the return value
before dereferencing kctl->id.device, which can lead to a NULL pointer
dereference.

Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any
fails.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1f6c520932bca5be9e8dec137fccb2fc094a80fe
Version < d7c71dfd4b80f0eacac2c157a8a3a4c6e8b2e0d1
Status affected
Version c9b83ae4a1609b1914ba7fc70826a3f3a8b234db
Version < 91095474eea29b95c9a8bceb9b501a2702b6c55f
Status affected
Version c9b83ae4a1609b1914ba7fc70826a3f3a8b234db
Version < 02f33c2062c75e28abc7ad58ce86451cf3140455
Status affected
Version c9b83ae4a1609b1914ba7fc70826a3f3a8b234db
Version < f6538a318947b627710b08a268bc80a48c23bde7
Status affected
Version c9b83ae4a1609b1914ba7fc70826a3f3a8b234db
Version < 18ec7d7785be7a4ee8ea11e355122282caad4267
Status affected
Version c9b83ae4a1609b1914ba7fc70826a3f3a8b234db
Version < e64d170346d00b580c0043de3e5ccb3e331c47d4
Status affected
Version cf671d2462d9af50c328bcc185d2c7b9726f8093
Status affected
Version 6.1.34
Version < 6.1.178
Status affected
Version 6.3.8
Version < 6.4
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.4
Status affected
Version 0
Version < 6.4
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.96
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.4
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.079
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/d7c71dfd4b80f0eacac2c157a8a3a4c6e8b2e0d1
https://git.kernel.org/stable/c/91095474eea29b95c9a8bceb9b501a2702b6c55f
https://git.kernel.org/stable/c/02f33c2062c75e28abc7ad58ce86451cf3140455
https://git.kernel.org/stable/c/f6538a318947b627710b08a268bc80a48c23bde7
https://git.kernel.org/stable/c/18ec7d7785be7a4ee8ea11e355122282caad4267
https://git.kernel.org/stable/c/e64d170346d00b580c0043de3e5ccb3e331c47d4