CVE-2026-64484
kernel: ALSA: es1938: check snd_ctl_new1() return value
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 25, 2026
Updated · July 30, 2026
Description
A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) es1938 sound driver. This vulnerability arises when a memory allocation failure causes the snd_ctl_new1() function to return a null value. The snd_es1938_mixer() function then attempts to use this null value without proper validation, leading to a null pointer dereference. This can result in a system crash, causing a Denial of Service (DoS) for affected systems.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-476 · NULL Pointer Dereference