Back to overview

CVE-2026-64480

Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. The ice1712 driver calls snd_ctl_new1() without checking the return value before dereferencing the pointer in multiple places (ice1712.c, ice1724.c, aureon.c), which can lead to NULL pointer dereferences. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

Metadata

CVE ID
CVE-2026-64480
State
PUBLISHED
Assigner
Linux
Reserved
2026-07-19 15:36 UTC
Published
2026-07-25 08:51 UTC
Last updated
2026-07-25 08:51 UTC
Vendor / Product
Linux / Linux
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (2)
VendorProductPlatformVersions
Linux Linux 0df0097ea2d52401c31e550389ac758c90e6a1eb < 57d59be545b309d4bb54ac472b15d1e67f254d95, b9a4efd61b6b9f62f83752959e75a5dae20624fa < 69bf1dfa3215524c4ae255bb9dce0770875abbeb, b9a4efd61b6b9f62f83752959e75a5dae20624fa < d34ad480b8896d2b486e2cf29ce1790326cad205, b9a4efd61b6b9f62f83752959e75a5dae20624fa < 71b87108ad93d433cdb20704a8dc8852304cf2c2 …
Linux Linux 6.4, 0 < 6.4, 6.1.178 ≤ 6.1.*, 6.6.145 ≤ 6.6.* …
Back to overview