Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2026-64489

Summary
Assigner-Linux
Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At-25 Jul, 2026 | 08:51
Updated At-25 Jul, 2026 | 08:51
Rejected At-
Credits

ALSA: ymfpci: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_ymfpci_create_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:Linux
Assigner Org ID:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:25 Jul, 2026 | 08:51
Updated At:25 Jul, 2026 | 08:51
Rejected At:
▼CVE Numbering Authority (CNA)
ALSA: ymfpci: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_ymfpci_create_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

Affected Products
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • sound/pci/ymfpci/ymfpci_main.c
Default Status
unaffected
Versions
Affected
  • From 1f6c520932bca5be9e8dec137fccb2fc094a80fe before d7c71dfd4b80f0eacac2c157a8a3a4c6e8b2e0d1 (git)
  • From c9b83ae4a1609b1914ba7fc70826a3f3a8b234db before 91095474eea29b95c9a8bceb9b501a2702b6c55f (git)
  • From c9b83ae4a1609b1914ba7fc70826a3f3a8b234db before 02f33c2062c75e28abc7ad58ce86451cf3140455 (git)
  • From c9b83ae4a1609b1914ba7fc70826a3f3a8b234db before f6538a318947b627710b08a268bc80a48c23bde7 (git)
  • From c9b83ae4a1609b1914ba7fc70826a3f3a8b234db before 18ec7d7785be7a4ee8ea11e355122282caad4267 (git)
  • From c9b83ae4a1609b1914ba7fc70826a3f3a8b234db before e64d170346d00b580c0043de3e5ccb3e331c47d4 (git)
  • cf671d2462d9af50c328bcc185d2c7b9726f8093 (git)
  • From 6.1.34 before 6.1.178 (semver)
  • From 6.3.8 before 6.4 (semver)
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • sound/pci/ymfpci/ymfpci_main.c
Default Status
affected
Versions
Affected
  • 6.4
Unaffected
  • From 0 before 6.4 (semver)
  • From 6.1.178 through 6.1.* (semver)
  • From 6.6.145 through 6.6.* (semver)
  • From 6.12.96 through 6.12.* (semver)
  • From 6.18.39 through 6.18.* (semver)
  • From 7.1.4 through 7.1.* (semver)
  • From 7.2-rc1 through * (original_commit_for_fix)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://git.kernel.org/stable/c/d7c71dfd4b80f0eacac2c157a8a3a4c6e8b2e0d1
N/A
https://git.kernel.org/stable/c/91095474eea29b95c9a8bceb9b501a2702b6c55f
N/A
https://git.kernel.org/stable/c/02f33c2062c75e28abc7ad58ce86451cf3140455
N/A
https://git.kernel.org/stable/c/f6538a318947b627710b08a268bc80a48c23bde7
N/A
https://git.kernel.org/stable/c/18ec7d7785be7a4ee8ea11e355122282caad4267
N/A
https://git.kernel.org/stable/c/e64d170346d00b580c0043de3e5ccb3e331c47d4
N/A
Hyperlink: https://git.kernel.org/stable/c/d7c71dfd4b80f0eacac2c157a8a3a4c6e8b2e0d1
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/91095474eea29b95c9a8bceb9b501a2702b6c55f
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/02f33c2062c75e28abc7ad58ce86451cf3140455
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/f6538a318947b627710b08a268bc80a48c23bde7
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/18ec7d7785be7a4ee8ea11e355122282caad4267
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/e64d170346d00b580c0043de3e5ccb3e331c47d4
Resource: N/A
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:25 Jul, 2026 | 10:17
Updated At:25 Jul, 2026 | 10:17

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_ymfpci_create_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
CPE Matches
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://git.kernel.org/stable/c/02f33c2062c75e28abc7ad58ce86451cf3140455416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/18ec7d7785be7a4ee8ea11e355122282caad4267416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/91095474eea29b95c9a8bceb9b501a2702b6c55f416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/d7c71dfd4b80f0eacac2c157a8a3a4c6e8b2e0d1416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/e64d170346d00b580c0043de3e5ccb3e331c47d4416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/f6538a318947b627710b08a268bc80a48c23bde7416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
Hyperlink: https://git.kernel.org/stable/c/02f33c2062c75e28abc7ad58ce86451cf3140455
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/18ec7d7785be7a4ee8ea11e355122282caad4267
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/91095474eea29b95c9a8bceb9b501a2702b6c55f
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/d7c71dfd4b80f0eacac2c157a8a3a4c6e8b2e0d1
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/e64d170346d00b580c0043de3e5ccb3e331c47d4
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/f6538a318947b627710b08a268bc80a48c23bde7
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

0Records found
Details not found