CVE-2026-64480

Summary

In the Linux kernel, the following vulnerability has been resolved:

ALSA: ice1712: check snd_ctl_new1() return value

snd_ctl_new1() can return NULL when memory allocation fails. The ice1712 driver calls snd_ctl_new1() without checking the return value before dereferencing the pointer in multiple places (ice1712.c, ice1724.c, aureon.c), which can lead to NULL pointer dereferences.

Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux0df0097ea2d52401c31e550389ac758c90e6a1eb < 57d59be545b309d4bb54ac472b15d1e67f254d95affected
LinuxLinuxb9a4efd61b6b9f62f83752959e75a5dae20624fa < 69bf1dfa3215524c4ae255bb9dce0770875abbebaffected
LinuxLinuxb9a4efd61b6b9f62f83752959e75a5dae20624fa < d34ad480b8896d2b486e2cf29ce1790326cad205affected
LinuxLinuxb9a4efd61b6b9f62f83752959e75a5dae20624fa < 71b87108ad93d433cdb20704a8dc8852304cf2c2affected
LinuxLinuxb9a4efd61b6b9f62f83752959e75a5dae20624fa < 38a7cc46370a57122fb29c4bfe48a851c0c64459affected
LinuxLinuxb9a4efd61b6b9f62f83752959e75a5dae20624fa < 2b929b91b0f3bc6de8a844370049cd99ee8e31ffaffected
LinuxLinux286e17a1c3baeb1b1cd36b63ee16e8a6e63d558eaffected
LinuxLinux6.1.34 < 6.1.178affected
LinuxLinux6.3.8 < 6.4affected
LinuxLinux6.4affected
LinuxLinux0 < 6.4unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.96 <= 6.12.*unaffected
LinuxLinux6.18.39 <= 6.18.*unaffected
LinuxLinux7.1.4 <= 7.1.*unaffected
LinuxLinux7.2-rc1 <= *unaffected

Weaknesses

References