CVE-2026-64484
Received Received - Intake

NULL Pointer Dereference in Linux Kernel ALSA es1938 Driver

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_es1938_mixer() does not check the return value before dereferencing the pointer, which can lead to a NULL pointer dereference. Add a NULL check after snd_ctl_new1() and return -ENOMEM if it fails.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-07-25
AI Q&A
2026-07-25
EPSS Evaluated
N/A
NVD
CVE-2026-64484
EUVD
EUVD-2026-48828

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a NULL pointer dereference vulnerability in the Linux kernel's ALSA es1938 driver. The snd_es1938_mixer() function calls snd_ctl_new1() which may return NULL if memory allocation fails. The code then tries to use this NULL pointer without checking, leading to a crash.

Detection Guidance

This vulnerability is specific to the Linux kernel's ALSA es1938 driver and involves a NULL pointer dereference due to unchecked snd_ctl_new1() return values. Detection requires checking kernel logs for NULL pointer dereference errors related to the es1938 driver or ALSA subsystem.

Impact Analysis

This could cause system instability or crashes when the affected ALSA driver is used. Users relying on audio functionality through this driver may experience sudden failures or kernel panics.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to patch the es1938 driver NULL pointer dereference issue. Monitor kernel logs for related errors and ensure the ALSA subsystem is functioning correctly after the update.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64484. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart