CVE-2026-64489

A flaw was found in the ALSA (Advanced Linux Sound Architecture) ymfpci driver in the Linux kernel. This vulnerability occurs because the 'snd_ctl_new1()' function, which allocates memory, may return a null value if memory allocation fails. The driver then attempts to use this null value without proper checks, leading to a null pointer dereference. A local attacker could exploit this to cause a denial of service (DoS), resulting in a system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.