NULL Pointer Dereference in Linux Kernel ALSA es1938 Component

CVE-2026-64484

What is CVE-2026-64484?

A vulnerability has been identified in the ALSA component of the Linux kernel specifically related to the es1938 mixer. The function snd_ctl_new1() can return NULL if memory allocation fails, but the snd_es1938_mixer() function lacks proper checks for this return value. Consequently, a NULL pointer dereference might occur. To mitigate this issue, it is essential to introduce a NULL check after invoking snd_ctl_new1() and appropriately handle the error by returning -ENOMEM if the memory allocation fails. This adjustment aims to enhance the stability and security of the affected components.

References