CVE-2026-64486
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_cmipci_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedJul 25, 2026
First seenJul 25, 2026
How to fix
Update
- Linux Linuxb44888c33c4f11277d0e5e023338f2740232a4ed, 8825a06bfa7932a7a74dec01669d405df0b47286, 4dd5b0b1a52a8d6e59a3f217204817228ce0238b, af2b009b773bc42995546507963e5e78970dc3ed, 67e9ea92cd598cba1783ff701553c776a6cedee9, c205bd1b28fb7e5f1061a4e78813fad7d315cb3e, 6.1.178, 6.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 3454490e0396191f8f9c215fccf5deef76abffb5 ≤ v < b44888c33c4f11277d0e5e023338f2740232a4ed, f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 ≤ v < 8825a06bfa7932a7a74dec01669d405df0b47286, f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 ≤ v < 4dd5b0b1a52a8d6e59a3f217204817228ce0238b, f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 ≤ v < af2b009b773bc42995546507963e5e78970dc3ed, f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 ≤ v < 67e9ea92cd598cba1783ff701553c776a6cedee9, f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 ≤ v < c205bd1b28fb7e5f1061a4e78813fad7d315cb3e, 7bf12707fa3db4c14fbe8ab93efb421d8ca93bf8, 6.1.34 ≤ v < 6.1.178, 6.3.8 ≤ v < 6.4, 6.4 | b44888c33c4f11277d0e5e023338f2740232a4ed, 8825a06bfa7932a7a74dec01669d405df0b47286, 4dd5b0b1a52a8d6e59a3f217204817228ce0238b, af2b009b773bc42995546507963e5e78970dc3ed, 67e9ea92cd598cba1783ff701553c776a6cedee9, c205bd1b28fb7e5f1061a4e78813fad7d315cb3e, 6.1.178, 6.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.