Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2026-64486

Summary
Assigner-Linux
Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At-25 Jul, 2026 | 08:51
Updated At-25 Jul, 2026 | 08:51
Rejected At-
Credits

ALSA: cmipci: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_cmipci_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:Linux
Assigner Org ID:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:25 Jul, 2026 | 08:51
Updated At:25 Jul, 2026 | 08:51
Rejected At:
▼CVE Numbering Authority (CNA)
ALSA: cmipci: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_cmipci_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

Affected Products
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • sound/pci/cmipci.c
Default Status
unaffected
Versions
Affected
  • From 3454490e0396191f8f9c215fccf5deef76abffb5 before b44888c33c4f11277d0e5e023338f2740232a4ed (git)
  • From f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 before 8825a06bfa7932a7a74dec01669d405df0b47286 (git)
  • From f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 before 4dd5b0b1a52a8d6e59a3f217204817228ce0238b (git)
  • From f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 before af2b009b773bc42995546507963e5e78970dc3ed (git)
  • From f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 before 67e9ea92cd598cba1783ff701553c776a6cedee9 (git)
  • From f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 before c205bd1b28fb7e5f1061a4e78813fad7d315cb3e (git)
  • 7bf12707fa3db4c14fbe8ab93efb421d8ca93bf8 (git)
  • From 6.1.34 before 6.1.178 (semver)
  • From 6.3.8 before 6.4 (semver)
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • sound/pci/cmipci.c
Default Status
affected
Versions
Affected
  • 6.4
Unaffected
  • From 0 before 6.4 (semver)
  • From 6.1.178 through 6.1.* (semver)
  • From 6.6.145 through 6.6.* (semver)
  • From 6.12.96 through 6.12.* (semver)
  • From 6.18.39 through 6.18.* (semver)
  • From 7.1.4 through 7.1.* (semver)
  • From 7.2-rc1 through * (original_commit_for_fix)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://git.kernel.org/stable/c/b44888c33c4f11277d0e5e023338f2740232a4ed
N/A
https://git.kernel.org/stable/c/8825a06bfa7932a7a74dec01669d405df0b47286
N/A
https://git.kernel.org/stable/c/4dd5b0b1a52a8d6e59a3f217204817228ce0238b
N/A
https://git.kernel.org/stable/c/af2b009b773bc42995546507963e5e78970dc3ed
N/A
https://git.kernel.org/stable/c/67e9ea92cd598cba1783ff701553c776a6cedee9
N/A
https://git.kernel.org/stable/c/c205bd1b28fb7e5f1061a4e78813fad7d315cb3e
N/A
Hyperlink: https://git.kernel.org/stable/c/b44888c33c4f11277d0e5e023338f2740232a4ed
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/8825a06bfa7932a7a74dec01669d405df0b47286
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/4dd5b0b1a52a8d6e59a3f217204817228ce0238b
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/af2b009b773bc42995546507963e5e78970dc3ed
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/67e9ea92cd598cba1783ff701553c776a6cedee9
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/c205bd1b28fb7e5f1061a4e78813fad7d315cb3e
Resource: N/A
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:25 Jul, 2026 | 10:17
Updated At:25 Jul, 2026 | 10:17

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_cmipci_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
CPE Matches
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://git.kernel.org/stable/c/4dd5b0b1a52a8d6e59a3f217204817228ce0238b416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/67e9ea92cd598cba1783ff701553c776a6cedee9416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/8825a06bfa7932a7a74dec01669d405df0b47286416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/af2b009b773bc42995546507963e5e78970dc3ed416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/b44888c33c4f11277d0e5e023338f2740232a4ed416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/c205bd1b28fb7e5f1061a4e78813fad7d315cb3e416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
Hyperlink: https://git.kernel.org/stable/c/4dd5b0b1a52a8d6e59a3f217204817228ce0238b
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/67e9ea92cd598cba1783ff701553c776a6cedee9
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/8825a06bfa7932a7a74dec01669d405df0b47286
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/af2b009b773bc42995546507963e5e78970dc3ed
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/b44888c33c4f11277d0e5e023338f2740232a4ed
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/c205bd1b28fb7e5f1061a4e78813fad7d315cb3e
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

0Records found
Details not found