U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2026-64486

Change History

New CVE Received from kernel.org 7/25/2026 6:17:34 AM

Action Type Old Value New Value
Added Description

                  
                
              
In the Linux kernel, the following vulnerability has been resolved:

ALSA: cmipci: check snd_ctl_new1() return value

snd_ctl_new1() can return NULL when memory allocation fails.
snd_cmipci_spdif_controls() does not check the return value before
dereferencing kctl->id.device, which can lead to a NULL pointer
dereference.

Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any
fails.
Added Reference

                  
                
              
https://git.kernel.org/stable/c/4dd5b0b1a52a8d6e59a3f217204817228ce0238b
Added Reference

                  
                
              
https://git.kernel.org/stable/c/67e9ea92cd598cba1783ff701553c776a6cedee9
Added Reference

                  
                
              
https://git.kernel.org/stable/c/8825a06bfa7932a7a74dec01669d405df0b47286
Added Reference

                  
                
              
https://git.kernel.org/stable/c/af2b009b773bc42995546507963e5e78970dc3ed
Added Reference

                  
                
              
https://git.kernel.org/stable/c/b44888c33c4f11277d0e5e023338f2740232a4ed
Added Reference

                  
                
              
https://git.kernel.org/stable/c/c205bd1b28fb7e5f1061a4e78813fad7d315cb3e
Added Affected

                  
                
              
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["sound/pci/cmipci.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"3454490e0396191f8f9c215fccf5deef76abffb5","lessThan":"b44888c33c4f11277d0e5e023338f2740232a4ed","versionType":"git","status":"affected"},{"version":"f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9","lessThan":"8825a06bfa7932a7a74dec01669d405df0b47286","versionType":"git","status":"affected"},{"version":"f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9","lessThan":"4dd5b0b1a52a8d6e59a3f217204817228ce0238b","versionType":"git","status":"affected"},{"version":"f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9","lessThan":"af2b009b773bc42995546507963e5e78970dc3ed","versionType":"git","status":"affected"},{"version":"f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9","lessThan":"67e9ea92cd598cba1783ff701553c776a6cedee9","versionType":"git","status":"affected"},{"version":"f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9","lessThan":"c205bd1b28fb7e5f1061a4e78813fad7d315cb3e","versionType":"git","status":"affected"},{"version":"7bf12707fa3db4c14fbe8ab93efb421d8ca93bf8","versionType":"git","status":"affected"},{"version":"6.1.34","lessThan":"6.1.178","versionType":"semver","status":"affected"},{"version":"6.3.8","lessThan":"6.4","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["sound/pci/cmipci.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.4","status":"affected"},{"version":"0","lessThan":"6.4","versionType":"semver","status":"unaffected"},{"version":"6.1.178","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.145","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.96","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.39","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.4","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc1","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]