Linux Kernel Vulnerability in ALSA Component by The Linux Foundation

CVE-2026-64482

What is CVE-2026-64482?

A vulnerability exists in the Linux kernel's ALSA component, where the function snd_ctl_new1() may return a NULL pointer if memory allocation fails. The snd_gf1_pcm_volume_control() function does not validate this return value, which can result in dereferencing a NULL pointer. To mitigate this issue, a NULL check should be added following the call to snd_ctl_new1(), and the function should return -ENOMEM to handle memory allocation failures appropriately.

References