CVE-2026-64486: ALSA: cmipci: check snd_ctl_new1() return value
Greg Kroah-Hartman <[email protected]> Sat, 25 Jul 2026 10:51:43 +0200
| Newsgroups | org.kernel.vger.linux-cve-announce |
|---|---|
| Message-ID | <2026072549-CVE-2026-64486-a656@gregkh> |
From: Greg Kroah-Hartman <[email protected]> Description =========== In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_cmipci_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails. The Linux kernel CVE team has assigned CVE-2026-64486 to this issue. Affected and fixed versions =========================== Issue introduced in 6.1.34 with commit 3454490e0396191f8f9c215fccf5deef76abffb5 and fixed in 6.1.178 with commit b44888c33c4f11277d0e5e023338f2740232a4ed Issue introduced in 6.4 with commit f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 and fixed in 6.6.145 with commit 8825a06bfa7932a7a74dec01669d405df0b47286 Issue introduced in 6.4 with commit f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 and fixed in 6.12.96 with commit 4dd5b0b1a52a8d6e59a3f217204817228ce0238b Issue introduced in 6.4 with commit f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 and fixed in 6.18.39 with commit af2b009b773bc42995546507963e5e78970dc3ed Issue introduced in 6.4 with commit f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 and fixed in 7.1.4 with commit 67e9ea92cd598cba1783ff701553c776a6cedee9 Issue introduced in 6.4 with commit f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 and fixed in 7.2-rc1 with commit c205bd1b28fb7e5f1061a4e78813fad7d315cb3e Issue introduced in 6.3.8 with commit 7bf12707fa3db4c14fbe8ab93efb421d8ca93bf8 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2026-64486 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: sound/pci/cmipci.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/b44888c33c4f11277d0e5e023338f2740232a4ed https://git.kernel.org/stable/c/8825a06bfa7932a7a74dec01669d405df0b47286 https://git.kernel.org/stable/c/4dd5b0b1a52a8d6e59a3f217204817228ce0238b https://git.kernel.org/stable/c/af2b009b773bc42995546507963e5e78970dc3ed https://git.kernel.org/stable/c/67e9ea92cd598cba1783ff701553c776a6cedee9 https://git.kernel.org/stable/c/c205bd1b28fb7e5f1061a4e78813fad7d315cb3e