CVE-2026-64482

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture (ALSA) Gravis Ultrasound (GUS) driver. When memory allocation fails, the snd_ctl_new1() function can return a null value. The snd_gf1_pcm_volume_control() function does not properly check for this null return, leading to a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.