CVE-2026-64001

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the ALSA PCM OSS component. The function snd pcm oss proc write() links a newly allocated setup entry into the OSS setup list before duplicating the task name. If the task-name allocation fails, the error path frees the linked entry, leaving the setup list pointing to freed memory. Subsequently, an OSS device open operation can trigger a dereference of this freed memory when snd pcm oss look for setup() traverses the stale list entry.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.