CVE-2026-64486 - Vulnerability Details

- ALSA: cmipci: check snd_ctl_new1() return value

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: cmipci: check snd_ctl_new1() return value

snd_ctl_new1() can return NULL when memory allocation fails.
snd_cmipci_spdif_controls() does not check the return value before
dereferencing kctl->id.device, which can lead to a NULL pointer
dereference.

Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any
fails.

Published: 2026-07-25

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`3454490e0396191f8f9c215fccf5deef76abffb5`	affected	< b44888c33c4f11277d0e5e023338f2740232a4ed
`f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9`	affected	< 8825a06bfa7932a7a74dec01669d405df0b47286
`f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9`	affected	< 4dd5b0b1a52a8d6e59a3f217204817228ce0238b
`f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9`	affected	< af2b009b773bc42995546507963e5e78970dc3ed
`f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9`	affected	< 67e9ea92cd598cba1783ff701553c776a6cedee9
`f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9`	affected	< c205bd1b28fb7e5f1061a4e78813fad7d315cb3e
`7bf12707fa3db4c14fbe8ab93efb421d8ca93bf8`	affected	—
`6.1.34`	affected	< 6.1.178
`6.3.8`	affected	< 6.4

Linux

affected

Version	Status	Constraints
`6.4`	affected	—
`0`	unaffected	< 6.4
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.96`	unaffected	≤ 6.12.*
`6.18.39`	unaffected	≤ 6.18.*
`7.1.4`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[3454490e0396191f8f9c215fccf5deef76abffb5,b44888c33c4f11277d0e5e023338f2740232a4ed)`	affected	code_commit	—
`[f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9,8825a06bfa7932a7a74dec01669d405df0b47286)`	affected	code_commit	—
`[f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9,4dd5b0b1a52a8d6e59a3f217204817228ce0238b)`	affected	code_commit	—
`[f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9,af2b009b773bc42995546507963e5e78970dc3ed)`	affected	code_commit	—
`[f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9,67e9ea92cd598cba1783ff701553c776a6cedee9)`	affected	code_commit	—
`[f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9,c205bd1b28fb7e5f1061a4e78813fad7d315cb3e)`	affected	code_commit	—
`7bf12707fa3db4c14fbe8ab93efb421d8ca93bf8`	affected	code_commit	—
`[6.1.34,6.1.178)`	affected	semver	—
`[6.3.8,6.4)`	affected	semver	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`6.4`	affected	semver	—
`[0,6.4)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.96,6.13.0)`	unaffected	semver	—
`[6.18.39,6.19.0)`	unaffected	semver	—
`[7.1.4,7.2.0)`	unaffected	semver	—
`7.2-rc1`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Debian DLA	DLA-4720-1	linux security update
Debian DLA	DLA-4723-1	linux-6.1 security update
Debian DLA	DLA-4724-1	linux-6.12 new package

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0018.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/4dd5b0b1a52a8d6e59a3f217204817228ce0238b
https://git.kernel.org/stable/c/67e9ea92cd598cba1783ff701553c776a6cedee9
https://git.kernel.org/stable/c/8825a06bfa7932a7a74dec01669d405df0b47286
https://git.kernel.org/stable/c/af2b009b773bc42995546507963e5e78970dc3ed
https://git.kernel.org/stable/c/b44888c33c4f11277d0e5e023338f2740232a4ed
https://git.kernel.org/stable/c/c205bd1b28fb7e5f1061a4e78813fad7d315cb3e
https://lore.kernel.org/linux-cve-announce/2026072549-CVE-2026-64486-a656@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-64486
https://www.cve.org/CVERecord?id=CVE-2026-64486

History

Thu, 30 Jul 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-476
References		https://lore.kernel.org/linux-cve-announce/2026072549-CVE-2026-64486-a656@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-64486 https://www.cve.org/CVERecord?id=CVE-2026-64486
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Sat, 25 Jul 2026 09:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_cmipci_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.
Title		ALSA: cmipci: check snd_ctl_new1() return value
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/4dd5b0b1a52a8d6e59a3f217204817228ce0238b https://git.kernel.org/stable/c/67e9ea92cd598cba1783ff701553c776a6cedee9 https://git.kernel.org/stable/c/8825a06bfa7932a7a74dec01669d405df0b47286 https://git.kernel.org/stable/c/af2b009b773bc42995546507963e5e78970dc3ed https://git.kernel.org/stable/c/b44888c33c4f11277d0e5e023338f2740232a4ed https://git.kernel.org/stable/c/c205bd1b28fb7e5f1061a4e78813fad7d315cb3e

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-25T08:51:45.982Z

Updated: 2026-08-17T04:56:33.629Z

Reserved: 2026-07-19T15:36:31.792Z

Link: CVE-2026-64486

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-07-25T10:17:34.310

Modified: 2026-08-17T05:17:54.450

Link: CVE-2026-64486

Redhat

Severity : Low

Publid Date: 2026-07-25T00:00:00Z

Links: CVE-2026-64486 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-05T01:45:04Z

Weaknesses

CWE-476

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object