CVE-2026-64488
- Source
- https://cve.org/CVERecord?id=CVE-2026-64488
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64488.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-64488
- Downstream
- Published
- 2026-07-25T08:51:47.436Z
- Modified
- 2026-07-27T04:02:41.307208723Z
- Summary
- ALSA: aoa: check snd_ctl_new1() return value
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ALSA: aoa: check sndctlnew1() return value
sndctlnew1() can return NULL when memory allocation fails. In layout.c, the function does not check the return value before dereferencing ctl->id.name or passing to aoasndctl_add(), which can lead to a NULL pointer dereference.
Add NULL checks after sndctlnew1() calls and return early if any fails.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64488.json" }- References
-
- https://git.kernel.org/stable/c/2ee9c46fd2dcd529cef18e37636ee12f5c3dbedd
- https://git.kernel.org/stable/c/8df560fefe6fed6a20b7e06720eeaeccec349ac0
- https://git.kernel.org/stable/c/b0154ebc6dc552c389a574b1e221d728e10346e7
- https://git.kernel.org/stable/c/d62624fe256b2d0d13454c78cbfc70ff5d954dc7
- https://git.kernel.org/stable/c/d73067e2bbf3775a495d9f38e38d0a3cf53ee790
- https://git.kernel.org/stable/c/e47f2a341adbac001b6f5d0211b0cd1c1668637b
- https://git.kernel.org/stable/c/e5e8c4508d95af82f9b4d065f658e5476a8e9bc8
- https://git.kernel.org/stable/c/fd786466889e4a6e6de0f4462bd0068edea63960
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64488.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-64488
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedf3d9478b2ce468c3115b02ecae7e975990697f15Fixedb0154ebc6dc552c389a574b1e221d728e10346e7Fixedd62624fe256b2d0d13454c78cbfc70ff5d954dc7Fixede5e8c4508d95af82f9b4d065f658e5476a8e9bc8Fixed2ee9c46fd2dcd529cef18e37636ee12f5c3dbeddFixedd73067e2bbf3775a495d9f38e38d0a3cf53ee790Fixedfd786466889e4a6e6de0f4462bd0068edea63960Fixede47f2a341adbac001b6f5d0211b0cd1c1668637bFixed8df560fefe6fed6a20b7e06720eeaeccec349ac0
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced2.6.18Fixed5.10.261
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.212
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.178
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.145
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.97
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.39
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed7.1.4