{"id":"CVE-2026-64480","state":"PUBLISHED","title":"ALSA: ice1712: check snd_ctl_new1() return value","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ice1712: check snd_ctl_new1() return value\n\nsnd_ctl_new1() can return NULL when memory allocation fails. The\nice1712 driver calls snd_ctl_new1() without checking the return value\nbefore dereferencing the pointer in multiple places (ice1712.c,\nice1724.c, aureon.c), which can lead to NULL pointer dereferences.\n\nAdd NULL checks after snd_ctl_new1() calls and return -ENOMEM if any\nfails.","publishedAt":"2026-07-25T08:51:41.691Z","updatedAt":"2026-08-17T04:56:26.964Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"0df0097ea2d52401c31e550389ac758c90e6a1eb","status":"affected","lessThan":"57d59be545b309d4bb54ac472b15d1e67f254d95","versionType":"git"},{"version":"b9a4efd61b6b9f62f83752959e75a5dae20624fa","status":"affected","lessThan":"69bf1dfa3215524c4ae255bb9dce0770875abbeb","versionType":"git"},{"version":"b9a4efd61b6b9f62f83752959e75a5dae20624fa","status":"affected","lessThan":"d34ad480b8896d2b486e2cf29ce1790326cad205","versionType":"git"},{"version":"b9a4efd61b6b9f62f83752959e75a5dae20624fa","status":"affected","lessThan":"71b87108ad93d433cdb20704a8dc8852304cf2c2","versionType":"git"},{"version":"b9a4efd61b6b9f62f83752959e75a5dae20624fa","status":"affected","lessThan":"38a7cc46370a57122fb29c4bfe48a851c0c64459","versionType":"git"},{"version":"b9a4efd61b6b9f62f83752959e75a5dae20624fa","status":"affected","lessThan":"2b929b91b0f3bc6de8a844370049cd99ee8e31ff","versionType":"git"},{"version":"286e17a1c3baeb1b1cd36b63ee16e8a6e63d558e","status":"affected","versionType":"git"},{"version":"6.1.34","status":"affected","lessThan":"6.1.178","versionType":"semver"},{"version":"6.3.8","status":"affected","lessThan":"6.4","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/pci/ice1712/aureon.c","sound/pci/ice1712/ice1712.c","sound/pci/ice1712/ice1724.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.4","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.4","versionType":"semver"},{"version":"6.1.178","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.145","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.96","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.39","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.4","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/pci/ice1712/aureon.c","sound/pci/ice1712/ice1712.c","sound/pci/ice1712/ice1724.c"]}],"references":["https://git.kernel.org/stable/c/57d59be545b309d4bb54ac472b15d1e67f254d95","https://git.kernel.org/stable/c/69bf1dfa3215524c4ae255bb9dce0770875abbeb","https://git.kernel.org/stable/c/d34ad480b8896d2b486e2cf29ce1790326cad205","https://git.kernel.org/stable/c/71b87108ad93d433cdb20704a8dc8852304cf2c2","https://git.kernel.org/stable/c/38a7cc46370a57122fb29c4bfe48a851c0c64459","https://git.kernel.org/stable/c/2b929b91b0f3bc6de8a844370049cd99ee8e31ff"],"weaknesses":[],"ingestedAt":"2026-10-29T20:12:41.951Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/64xxx/CVE-2026-64480.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-64480","state":"PUBLISHED","datePublished":"2026-07-25T08:51:41.691Z","dateUpdated":"2026-08-17T04:56:26.964Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-07-19T15:36:31.791Z"},"containers":{"cna":{"title":"ALSA: ice1712: check snd_ctl_new1() return value","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ice1712: check snd_ctl_new1() return value\n\nsnd_ctl_new1() can return NULL when memory allocation fails. The\nice1712 driver calls snd_ctl_new1() without checking the return value\nbefore dereferencing the pointer in multiple places (ice1712.c,\nice1724.c, aureon.c), which can lead to NULL pointer dereferences.\n\nAdd NULL checks after snd_ctl_new1() calls and return -ENOMEM if any\nfails."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"0df0097ea2d52401c31e550389ac758c90e6a1eb","status":"affected","lessThan":"57d59be545b309d4bb54ac472b15d1e67f254d95","versionType":"git"},{"version":"b9a4efd61b6b9f62f83752959e75a5dae20624fa","status":"affected","lessThan":"69bf1dfa3215524c4ae255bb9dce0770875abbeb","versionType":"git"},{"version":"b9a4efd61b6b9f62f83752959e75a5dae20624fa","status":"affected","lessThan":"d34ad480b8896d2b486e2cf29ce1790326cad205","versionType":"git"},{"version":"b9a4efd61b6b9f62f83752959e75a5dae20624fa","status":"affected","lessThan":"71b87108ad93d433cdb20704a8dc8852304cf2c2","versionType":"git"},{"version":"b9a4efd61b6b9f62f83752959e75a5dae20624fa","status":"affected","lessThan":"38a7cc46370a57122fb29c4bfe48a851c0c64459","versionType":"git"},{"version":"b9a4efd61b6b9f62f83752959e75a5dae20624fa","status":"affected","lessThan":"2b929b91b0f3bc6de8a844370049cd99ee8e31ff","versionType":"git"},{"version":"286e17a1c3baeb1b1cd36b63ee16e8a6e63d558e","status":"affected","versionType":"git"},{"version":"6.1.34","status":"affected","lessThan":"6.1.178","versionType":"semver"},{"version":"6.3.8","status":"affected","lessThan":"6.4","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/pci/ice1712/aureon.c","sound/pci/ice1712/ice1712.c","sound/pci/ice1712/ice1724.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.4","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.4","versionType":"semver"},{"version":"6.1.178","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.145","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.96","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.39","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.4","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/pci/ice1712/aureon.c","sound/pci/ice1712/ice1712.c","sound/pci/ice1712/ice1724.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/57d59be545b309d4bb54ac472b15d1e67f254d95"},{"url":"https://git.kernel.org/stable/c/69bf1dfa3215524c4ae255bb9dce0770875abbeb"},{"url":"https://git.kernel.org/stable/c/d34ad480b8896d2b486e2cf29ce1790326cad205"},{"url":"https://git.kernel.org/stable/c/71b87108ad93d433cdb20704a8dc8852304cf2c2"},{"url":"https://git.kernel.org/stable/c/38a7cc46370a57122fb29c4bfe48a851c0c64459"},{"url":"https://git.kernel.org/stable/c/2b929b91b0f3bc6de8a844370049cd99ee8e31ff"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-08-17T04:56:26.964Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.34","versionEndExcluding":"6.1.178"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4","versionEndExcluding":"6.6.145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4","versionEndExcluding":"6.12.96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4","versionEndExcluding":"6.18.39"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4","versionEndExcluding":"7.1.4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4","versionEndExcluding":"7.2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.8"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}