CVE-2026-64133

A flaw was found in the Linux kernel, specifically within the Advanced Linux Sound Architecture (ALSA) asihpi component. This vulnerability occurs because a function designed to retrieve cached information does not properly check the boundaries of an array it is accessing. This oversight could allow a local attacker to access memory outside of its intended limits, potentially leading to system instability (denial of service) or, in some cases, unauthorized privilege escalation.

Red Hat has rated this vulnerability as having Moderate severity because exploitation requires local access and depends on the presence of specialized AudioScience HPI sound hardware. In standard enterprise server environments, this hardware is rarely present, substantially restricting overall exposure. An authenticated local user could trigger an out-of-bounds access within the cache control routine, resulting in a kernel crash and system denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.