CVE-2026-64482: ALSA: gus: check snd_ctl_new1() return value
ALSA: gus: check sndctlnew1() return value
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.145.2-1 - Configuration
In snd_gf1_pcm_volume_control(), add a NULL check immediately after snd_ctl_new1(); if it fails (returns NULL), return -ENOMEM.
Linux kernel (ALSA: gus) snd_gf1_pcm_volume_control() = Add NULL check for snd_ctl_new1() return value; if NULL, return -ENOMEM
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64482?
CVE-2026-64482 has a risk rating of 14, indicating a significant severity level.
How do I fix CVE-2026-64482?
To fix CVE-2026-64482, update to the patched version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2026-64482?
CVE-2026-64482 affects the Linux kernel specifically related to ALSA and gus functionalities.
What does CVE-2026-64482 entail?
CVE-2026-64482 involves a failure to check the return value of snd_ctl_new1() in the Linux kernel, potentially leading to dereferencing a NULL pointer.
When was CVE-2026-64482 published?
CVE-2026-64482 was published on July 25, 2026.