PT-2026-64707 · Linux+1 · Linux Kernel+1
CVE-2026-64486
·
Published
2026-07-25
·
Updated
2026-09-07
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
In the ALSA cmipci component, the
snd cmipci spdif controls() function fails to verify the return value of snd ctl new1(). When memory allocation fails, snd ctl new1() can return NULL, and the subsequent dereferencing of kctl->id.device leads to a NULL pointer dereference, which is a condition where the system attempts to read or write to a memory address that is null, typically resulting in a system crash.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Ubuntu