CVE-2026-64484 is a vulnerability in Linux Kernel
Published on July 25, 2026
ALSA: es1938: check snd_ctl_new1() return value
In the Linux kernel, the following vulnerability has been resolved:
ALSA: es1938: check snd_ctl_new1() return value
snd_ctl_new1() can return NULL when memory allocation fails.
snd_es1938_mixer() does not check the return value before dereferencing
the pointer, which can lead to a NULL pointer dereference.
Add a NULL check after snd_ctl_new1() and return -ENOMEM if it fails.
Products Associated with CVE-2026-64484
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below 96cad5bd7d0a176db3fdc06717a41271247336bd is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below 6c4efebaf73e217efbd08cdbda805758a7db3680 is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below 41759affbcfe3d51a32900da9547a1ffd744a85f is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below 7531a37720c2545a480fd0fa464978569bf9d6a2 is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below af01c48e17a66fa038af210a5c49d6cdefd210bd is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below 9e53e99b6fa3cd82992d963cbff58dbbd1df8651 is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below 1949163dee39e0e4a1468f37dd7302962f6af45a is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below 1edd1f02dddd20aeb6066ded41017615766ea42f is affected.
- Version 2.6.12 is affected.
- Before 2.6.12 is unaffected.
- Version 5.10.261, <= 5.10.* is unaffected.
- Version 5.15.212, <= 5.15.* is unaffected.
- Version 6.1.178, <= 6.1.* is unaffected.
- Version 6.6.145, <= 6.6.* is unaffected.
- Version 6.12.96, <= 6.12.* is unaffected.
- Version 6.18.39, <= 6.18.* is unaffected.
- Version 7.1.4, <= 7.1.* is unaffected.
- Version 7.2-rc1, <= * is unaffected.