CVE-2026-64133: ALSA: asihpi: Fix potential OOB array access at reading cache
In the Linux kernel, the following vulnerability has been resolved:
ALSA: asihpi: Fix potential OOB array access at reading cache
findcontrol() to retrieve a cached info accesses the array with the given index blindly, which may lead to an OOB array access. Add a sanity check for avoiding it.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Add a sanity check in find_control() to validate the given index before accessing the cached-info array, preventing out-of-bounds array access.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64133?
The severity of CVE-2026-64133 is high with a CVSS score of 7.8.
What are the risks associated with CVE-2026-64133?
CVE-2026-64133 can potentially lead to an out-of-bounds (OOB) array access which may compromise system stability and security.
How do I fix CVE-2026-64133?
To fix CVE-2026-64133, update the Linux kernel to the latest version where the vulnerability has been addressed.
Which software is affected by CVE-2026-64133?
CVE-2026-64133 affects the Linux kernel specifically relating to the ALSA subsystem.
When was CVE-2026-64133 published?
CVE-2026-64133 was published on July 19, 2026.