CVE-2026-97418
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: es18xx: check control allocation before private data setup snd_es18xx_mixer() creates controls with snd_ctl_new1() and then stores bookkeeping pointers or sets private_free before calling snd_ctl_add(). snd_ctl_new1() can return NULL on allocation failure, so those writes can dereference a NULL control pointer. Check the returned control pointers before using them and return -ENOMEM on allocation failure.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 24, 2026
First seenSep 24, 2026
How to fix
Update
- Linux Linuxe6c84fe4cf6f98f7b1ad446a42cfcb46bae83f66, 908323ed61d5e7ad74889524d327cfb6a65ec8df, 3d8adddf4e4a5a43847ee62e5e78ba05e756bdef, 91c97a7969dae976de954453ab6e925e6522fecb, 978079238f40f1a08ddb12ce208c484246f6a1b0, d88c24b76f285df9d206751e22c28e2613258cb3, 422e42b7c2b882ba1d16d4afc8891bcea7c4de93 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < e6c84fe4cf6f98f7b1ad446a42cfcb46bae83f66, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 908323ed61d5e7ad74889524d327cfb6a65ec8df, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 3d8adddf4e4a5a43847ee62e5e78ba05e756bdef, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 91c97a7969dae976de954453ab6e925e6522fecb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 978079238f40f1a08ddb12ce208c484246f6a1b0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < d88c24b76f285df9d206751e22c28e2613258cb3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 422e42b7c2b882ba1d16d4afc8891bcea7c4de93, 2.6.12 | e6c84fe4cf6f98f7b1ad446a42cfcb46bae83f66, 908323ed61d5e7ad74889524d327cfb6a65ec8df, 3d8adddf4e4a5a43847ee62e5e78ba05e756bdef, 91c97a7969dae976de954453ab6e925e6522fecb, 978079238f40f1a08ddb12ce208c484246f6a1b0, d88c24b76f285df9d206751e22c28e2613258cb3, 422e42b7c2b882ba1d16d4afc8891bcea7c4de93 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.