CVE-2026-64134: ALSA: pcm: Don't setup bogus iov_iter for silencing
In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Don't setup bogus ioviter for silencing
At transition to the ioviter for PCM data transfer, we blindly applied the ioviter setup also for silencing (i.e. data = NULL), and it leads to a calculation of bogus ioviter. Fortunately this didn't cause troubles on most of architectures but it goes wrong on RISC-V now, causing a NULL dereference.
Handle the NULL data case to treat the silencing in interleavedcopy() for addressing the bug above. noninterleavedcopy() has already the NULL data handling, so it doesn't need changes.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64134?
CVE-2026-64134 has a risk rating of 23.
How do I fix CVE-2026-64134?
To fix CVE-2026-64134, you should update your Linux kernel to the latest version where this vulnerability has been addressed.
What systems are affected by CVE-2026-64134?
CVE-2026-64134 affects the Linux kernel with ALSA PCM data transfer components.
What does CVE-2026-64134 vulnerability involve?
CVE-2026-64134 involves setting up an incorrect iov_iter for silencing during PCM data transfer in the Linux kernel.
Is CVE-2026-64134 exploitable?
The details regarding the exploitability of CVE-2026-64134 are not disclosed, but vulnerabilities in kernel components can potentially be serious.