Vulnerability in Linux

CVE-2026-64484

In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_es1938_mixer() does not check the return value before dereferencing the pointer, which can lead to a NULL pointer dereference. Add a NULL check after snd_ctl_new1() and return -ENOMEM if it fails.

EPSS: 0.002 (8.2th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 7.2-rc1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 6.6.145

References