CVE-2026-64488

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the ALSA aoa component, the snd ctl new1() function can return NULL during memory allocation failures. In layout.c, the system fails to verify this return value before dereferencing ctl->id.name or passing the result to the aoa snd ctl add() function, which can result in a NULL pointer dereference. A NULL pointer dereference occurs when a program attempts to read or write to a memory address that is NULL, typically causing the application or system to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.