CVE-2026-64486

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the ALSA cmipci component, the snd cmipci spdif controls() function fails to verify the return value of snd ctl new1(). When memory allocation fails, snd ctl new1() can return NULL, and the subsequent dereferencing of kctl->id.device leads to a NULL pointer dereference, which is a condition where the system attempts to read or write to a memory address that is null, typically resulting in a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.