CVE-2026-64488 - Vulnerability Details

- ALSA: aoa: check snd_ctl_new1() return value

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: aoa: check snd_ctl_new1() return value

snd_ctl_new1() can return NULL when memory allocation fails. In
layout.c, the function does not check the return value before
dereferencing ctl->id.name or passing to aoa_snd_ctl_add(), which can
lead to a NULL pointer dereference.

Add NULL checks after snd_ctl_new1() calls and return early if any
fails.

Published: 2026-07-25

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`f3d9478b2ce468c3115b02ecae7e975990697f15`	affected	< b0154ebc6dc552c389a574b1e221d728e10346e7
`f3d9478b2ce468c3115b02ecae7e975990697f15`	affected	< d62624fe256b2d0d13454c78cbfc70ff5d954dc7
`f3d9478b2ce468c3115b02ecae7e975990697f15`	affected	< e5e8c4508d95af82f9b4d065f658e5476a8e9bc8
`f3d9478b2ce468c3115b02ecae7e975990697f15`	affected	< 2ee9c46fd2dcd529cef18e37636ee12f5c3dbedd
`f3d9478b2ce468c3115b02ecae7e975990697f15`	affected	< d73067e2bbf3775a495d9f38e38d0a3cf53ee790
`f3d9478b2ce468c3115b02ecae7e975990697f15`	affected	< fd786466889e4a6e6de0f4462bd0068edea63960
`f3d9478b2ce468c3115b02ecae7e975990697f15`	affected	< e47f2a341adbac001b6f5d0211b0cd1c1668637b
`f3d9478b2ce468c3115b02ecae7e975990697f15`	affected	< 8df560fefe6fed6a20b7e06720eeaeccec349ac0

Linux

affected

Version	Status	Constraints
`2.6.18`	affected	—
`0`	unaffected	< 2.6.18
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.39`	unaffected	≤ 6.18.*
`7.1.4`	unaffected	≤ 7.1.*
`7.2-rc1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[f3d9478b2ce468c3115b02ecae7e975990697f15,b0154ebc6dc552c389a574b1e221d728e10346e7)`	affected	code_commit	—
`[f3d9478b2ce468c3115b02ecae7e975990697f15,d62624fe256b2d13454c78cbfc70ff5d954dc7)`	affected	code_commit	—
`[f3d9478b2ce468c3115b02ecae7e975990697f15,e5e8c4508d95af82f9b4d065f658e5476a8e9bc8)`	affected	code_commit	—
`[f3d9478b2ce468c3115b02ecae7e975990697f15,2ee9c46fd2dcd529cef18e37636ee12f5c3dbedd)`	affected	code_commit	—
`[f3d9478b2ce468c3115b02ecae7e975990697f15,d73067e2bbf3775a495d9f38e38d0a3cf53ee790)`	affected	code_commit	—
`[f3d9478b2ce468c3115b02ecae7e975990697f15,fd786466889e4a6e6de0f4462bd0068edea63960)`	affected	code_commit	—
`[f3d9478b2ce468c3115b02ecae7e975990697f15,e47f2a341adbac001b6f5d0211b0cd1c1668637b)`	affected	code_commit	—
`[f3d9478b2ce468c3115b02ecae7e975990697f15,8df560fefe6fed6a20b7e06720eeaeccec349ac0)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`2.6.18`	affected	semver	—
`[0,2.6.18)`	unaffected	semver	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.39,6.19.0)`	unaffected	semver	—
`[7.1.4,7.2.0)`	unaffected	semver	—
`[7.2-rc1,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00184.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/2ee9c46fd2dcd529cef18e37636ee12f5c3dbedd
https://git.kernel.org/stable/c/8df560fefe6fed6a20b7e06720eeaeccec349ac0
https://git.kernel.org/stable/c/b0154ebc6dc552c389a574b1e221d728e10346e7
https://git.kernel.org/stable/c/d62624fe256b2d0d13454c78cbfc70ff5d954dc7
https://git.kernel.org/stable/c/d73067e2bbf3775a495d9f38e38d0a3cf53ee790
https://git.kernel.org/stable/c/e47f2a341adbac001b6f5d0211b0cd1c1668637b
https://git.kernel.org/stable/c/e5e8c4508d95af82f9b4d065f658e5476a8e9bc8
https://git.kernel.org/stable/c/fd786466889e4a6e6de0f4462bd0068edea63960
https://lore.kernel.org/linux-cve-announce/2026072549-CVE-2026-64488-26ce@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-64488
https://www.cve.org/CVERecord?id=CVE-2026-64488

History

Thu, 30 Jul 2026 12:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-476
References		https://lore.kernel.org/linux-cve-announce/2026072549-CVE-2026-64488-26ce@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-64488 https://www.cve.org/CVERecord?id=CVE-2026-64488
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Sat, 25 Jul 2026 09:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. In layout.c, the function does not check the return value before dereferencing ctl->id.name or passing to aoa_snd_ctl_add(), which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return early if any fails.
Title		ALSA: aoa: check snd_ctl_new1() return value
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/2ee9c46fd2dcd529cef18e37636ee12f5c3dbedd https://git.kernel.org/stable/c/8df560fefe6fed6a20b7e06720eeaeccec349ac0 https://git.kernel.org/stable/c/b0154ebc6dc552c389a574b1e221d728e10346e7 https://git.kernel.org/stable/c/d62624fe256b2d0d13454c78cbfc70ff5d954dc7 https://git.kernel.org/stable/c/d73067e2bbf3775a495d9f38e38d0a3cf53ee790 https://git.kernel.org/stable/c/e47f2a341adbac001b6f5d0211b0cd1c1668637b https://git.kernel.org/stable/c/e5e8c4508d95af82f9b4d065f658e5476a8e9bc8 https://git.kernel.org/stable/c/fd786466889e4a6e6de0f4462bd0068edea63960

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-25T08:51:47.436Z

Updated: 2026-07-25T08:51:47.436Z

Reserved: 2026-07-19T15:36:31.792Z

Link: CVE-2026-64488

Vulnrichment

No data.

NVD

No data.

Redhat

Severity : Low

Publid Date: 2026-07-25T00:00:00Z

Links: CVE-2026-64488 - Bugzilla

OpenCVE Enrichment

Updated: 2026-07-30T02:45:10Z

Weaknesses

CWE-476
NULL Pointer Dereference

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object