-

CVE-2026-97418

ALSA: es18xx: check control allocation before private data setup

In the Linux kernel, the following vulnerability has been resolved:

ALSA: es18xx: check control allocation before private data setup

snd_es18xx_mixer() creates controls with snd_ctl_new1() and then stores
bookkeeping pointers or sets private_free before calling snd_ctl_add().
snd_ctl_new1() can return NULL on allocation failure, so those writes
can dereference a NULL control pointer.

Check the returned control pointers before using them and return -ENOMEM
on allocation failure.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < e6c84fe4cf6f98f7b1ad446a42cfcb46bae83f66
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 908323ed61d5e7ad74889524d327cfb6a65ec8df
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 3d8adddf4e4a5a43847ee62e5e78ba05e756bdef
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 91c97a7969dae976de954453ab6e925e6522fecb
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 978079238f40f1a08ddb12ce208c484246f6a1b0
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < d88c24b76f285df9d206751e22c28e2613258cb3
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 422e42b7c2b882ba1d16d4afc8891bcea7c4de93
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.12
Status affected
Version 0
Version < 2.6.12
Status unaffected
Version <= 5.10.*
Version 5.10.271
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.052
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/978079238f40f1a08ddb12ce208c484246f6a1b0
https://git.kernel.org/stable/c/d88c24b76f285df9d206751e22c28e2613258cb3
https://git.kernel.org/stable/c/422e42b7c2b882ba1d16d4afc8891bcea7c4de93
https://git.kernel.org/stable/c/3d8adddf4e4a5a43847ee62e5e78ba05e756bdef
https://git.kernel.org/stable/c/908323ed61d5e7ad74889524d327cfb6a65ec8df
https://git.kernel.org/stable/c/91c97a7969dae976de954453ab6e925e6522fecb
https://git.kernel.org/stable/c/e6c84fe4cf6f98f7b1ad446a42cfcb46bae83f66