PT-2026-64701 · Linux · Linux

CVE-2026-64480 · Published 2026-07-25 · Updated 2026-07-25

NVD

In the Linux kernel, the following vulnerability has been resolved:

ALSA: ice1712: check snd ctl new1() return value

snd ctl new1() can return NULL when memory allocation fails. The ice1712 driver calls snd ctl new1() without checking the return value before dereferencing the pointer in multiple places (ice1712.c, ice1724.c, aureon.c), which can lead to NULL pointer dereferences.

Add NULL checks after snd ctl new1() calls and return -ENOMEM if any fails.

Related Identifiers

CVE-2026-64480

Affected Products

Linux

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-64480 · Security Note
• https://git.kernel.org/stable/c/71b87108ad93d433cdb20704a8dc8852304cf2c2 · Note
• https://git.kernel.org/stable/c/38a7cc46370a57122fb29c4bfe48a851c0c64459 · Note
• https://git.kernel.org/stable/c/2b929b91b0f3bc6de8a844370049cd99ee8e31ff · Note
• https://git.kernel.org/stable/c/69bf1dfa3215524c4ae255bb9dce0770875abbeb · Note
• https://git.kernel.org/stable/c/57d59be545b309d4bb54ac472b15d1e67f254d95 · Note
• https://git.kernel.org/stable/c/d34ad480b8896d2b486e2cf29ce1790326cad205 · Note