CVE Database›Document archive›CVE-2026-64484

CVE-2026-64484

kernel: ALSA: es1938: check snd_ctl_new1() return value

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · July 30, 2026

Description

A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) es1938 sound driver. This vulnerability arises when a memory allocation failure causes the snd_ctl_new1() function to return a null value. The snd_es1938_mixer() function then attempts to use this null value without proper validation, leading to a null pointer dereference. This can result in a system crash, causing a Denial of Service (DoS) for affected systems.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference