CVE-2026-64482

Summary

In the Linux kernel, the following vulnerability has been resolved:

ALSA: gus: check snd_ctl_new1() return value

snd_ctl_new1() can return NULL when memory allocation fails. snd_gf1_pcm_volume_control() does not check the return value before dereferencing kctl->id.index, which can lead to a NULL pointer dereference.

Add a NULL check after snd_ctl_new1() and return -ENOMEM if it fails.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxc35034fd6446afaf408d5ab296068e32c775c965 < 97f6bdf5d5ded2e37f358cacb5a95f1393356604affected
LinuxLinuxc5ae57b1bb99bd6f50b90428fabde397c2aeba0f < eccf8e91266e39f6f15637702a04a1d344833fe2affected
LinuxLinuxc5ae57b1bb99bd6f50b90428fabde397c2aeba0f < fc5d4f27ca1293bc1379ef8fff691c30d9803ca2affected
LinuxLinuxc5ae57b1bb99bd6f50b90428fabde397c2aeba0f < 5e74e5e8cb7cc25f7a89f59abaf3489bf0c6f4a0affected
LinuxLinuxc5ae57b1bb99bd6f50b90428fabde397c2aeba0f < 465075c6835103821d725c13f8c545898e5f2636affected
LinuxLinuxc5ae57b1bb99bd6f50b90428fabde397c2aeba0f < c7fa99d30c7a166a5e5db5a585ce7501ff68326baffected
LinuxLinuxa1374d2683442633f8ad2169f8f31df45048e008affected
LinuxLinux6.1.34 < 6.1.178affected
LinuxLinux6.3.8 < 6.4affected
LinuxLinux6.4affected
LinuxLinux0 < 6.4unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.96 <= 6.12.*unaffected
LinuxLinux6.18.39 <= 6.18.*unaffected
LinuxLinux7.1.4 <= 7.1.*unaffected
LinuxLinux7.2-rc1 <= *unaffected

Weaknesses

References