Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-64488

ALSA: aoa: check snd_ctl_new1() return value

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. In layout.c, the function does not check the return value before dereferencing ctl->id.name or passing to aoa_snd_ctl_add(), which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return early if any fails.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f3d9478b2ce468c3115b02ecae7e975990697f15 to < b0154ebc6dc552c389a574b1e221d728e10346e7affected
  • f3d9478b2ce468c3115b02ecae7e975990697f15 to < d62624fe256b2d0d13454c78cbfc70ff5d954dc7affected
  • f3d9478b2ce468c3115b02ecae7e975990697f15 to < e5e8c4508d95af82f9b4d065f658e5476a8e9bc8affected
  • f3d9478b2ce468c3115b02ecae7e975990697f15 to < 2ee9c46fd2dcd529cef18e37636ee12f5c3dbeddaffected
  • f3d9478b2ce468c3115b02ecae7e975990697f15 to < d73067e2bbf3775a495d9f38e38d0a3cf53ee790affected
  • f3d9478b2ce468c3115b02ecae7e975990697f15 to < fd786466889e4a6e6de0f4462bd0068edea63960affected
  • f3d9478b2ce468c3115b02ecae7e975990697f15 to < e47f2a341adbac001b6f5d0211b0cd1c1668637baffected
  • f3d9478b2ce468c3115b02ecae7e975990697f15 to < 8df560fefe6fed6a20b7e06720eeaeccec349ac0affected

Linux Linux

Default version status: affected

  • 2.6.18affected
  • 0 to < 2.6.18unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.39 to ≤ 6.18.*unaffected
  • 7.1.4 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References