CVE-2026-64482

ALSA: gus: check snd_ctl_new1() return value

N/A

Published: July 25, 2026 at 08:51 AM UTC

Updated: August 17, 2026 at 05:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_gf1_pcm_volume_control() does not check the return value before dereferencing kctl->id.index, which can lead to a NULL pointer dereference. Add a NULL check after snd_ctl_new1() and return -ENOMEM if it fails.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 6.3.86.1.34 ≤ v < 6.1.1786.3.8 ≤ v < 6.46.4 ≤ v < 6.12.966.4 ≤ v < 6.18.396.4 ≤ v < 6.6.1456.4 ≤ v < 7.1.46.4 ≤ v < 7.26.1.34 6.3.8 6.4a1374d2683442633f8ad2169f8f31df45048e008c35034fd6446afaf408d5ab296068e32c775c965c5ae57b1bb99bd6f50b90428fabde397c2aeba0f

Vendor states this is fixed in 465075c6835103821d725c13f8c545898e5f2636 (fixed)

Vendor states this is fixed in 5e74e5e8cb7cc25f7a89f59abaf3489bf0c6f4a0 (fixed)

Vendor states this is fixed in 97f6bdf5d5ded2e37f358cacb5a95f1393356604 (fixed)

Vendor states this is fixed in c7fa99d30c7a166a5e5db5a585ce7501ff68326b (fixed)

Vendor states this is fixed in eccf8e91266e39f6f15637702a04a1d344833fe2 (fixed)

Vendor states this is fixed in fc5d4f27ca1293bc1379ef8fff691c30d9803ca2 (fixed)

Vendor states this is fixed in 6.1.178 (unaffected)

Vendor states this is fixed in 6.12.96 (unaffected)

Vendor states this is fixed in 6.18.39 (unaffected)

Vendor states this is fixed in 6.4 (unaffected)

Vendor states this is fixed in 6.6.145 (unaffected)

Vendor states this is fixed in 7.1.4 (unaffected)