PT-2026-64705 · Linux · Linux

CVE-2026-64484 · Published 2026-07-25 · Updated 2026-07-25

Mitre

In the Linux kernel, the following vulnerability has been resolved:

ALSA: es1938: check snd ctl new1() return value

snd ctl new1() can return NULL when memory allocation fails. snd es1938 mixer() does not check the return value before dereferencing the pointer, which can lead to a NULL pointer dereference.

Add a NULL check after snd ctl new1() and return -ENOMEM if it fails.

Related Identifiers

CVE-2026-64484

Affected Products

Linux

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-64484 · Security Note
• https://git.kernel.org/stable/c/41759affbcfe3d51a32900da9547a1ffd744a85f · Note
• https://git.kernel.org/stable/c/af01c48e17a66fa038af210a5c49d6cdefd210bd · Note
• https://git.kernel.org/stable/c/9e53e99b6fa3cd82992d963cbff58dbbd1df8651 · Note
• https://git.kernel.org/stable/c/1edd1f02dddd20aeb6066ded41017615766ea42f · Note
• https://git.kernel.org/stable/c/96cad5bd7d0a176db3fdc06717a41271247336bd · Note
• https://git.kernel.org/stable/c/6c4efebaf73e217efbd08cdbda805758a7db3680 · Note
• https://git.kernel.org/stable/c/1949163dee39e0e4a1468f37dd7302962f6af45a · Note
• https://git.kernel.org/stable/c/7531a37720c2545a480fd0fa464978569bf9d6a2 · Note