CVE-2026-64489

CVE-2026-64489

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_ymfpci_create_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

CVE-2026-64489

A flaw was found in the ALSA (Advanced Linux Sound Architecture) ymfpci driver in the Linux kernel. This vulnerability occurs because the 'snd_ctl_new1()' function, which allocates memory, may return a null value if memory allocation fails. The driver then attempts to use this null value without proper checks, leading to a null pointer dereference. A local attacker could exploit this to cause a denial of service (DoS), resulting in a system crash.

CVE-2026-64489

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_ymfpci_create_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

CVE-2026-64489

In the Linux kernel, the following vulnerability has been resolved: A ...

GHSA-6634-rq92-25wm

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_ymfpci_create_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.