CVE Explorer

CVE-2026-64489

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_ymfpci_create_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a7ed9fbfaf347725c403c64655b7c1a3ab6aa0d854bac05c0c9e05f86f47b49b

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["sound/pci/ymfpci/ymfpci_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.4"},{"lessThan":"6.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.96","versionType":"semver"},{"les…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:f4ad45ac6bd3b4821300b2169de7597b656b3aae4a32679a1effef45f7af096f · sha256:ad13f844a9ea8178… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/pci/ymfpci/ymfpci_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d7c71dfd4b80f0eacac2c157a8a3a4c6e8b2e0d1","status":"affected","version":"1f6c520932bca5be9e8dec137fccb2fc094a80fe","versionType":"git"},{"lessThan":"91095474eea29b95c9a8bceb9b501a2702b6c55f","status":"affected","version":"c9b83ae4a1609b1914ba7fc70826a3f3a8b234db","versionType":"git"},{"lessThan":"02f33c2062c75e28abc7ad58ce86451cf3140455","status":"affected","version":"c9b83ae4a1609b1…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:f4ad45ac6bd3b4821300b2169de7597b656b3aae4a32679a1effef45f7af096f · sha256:ad13f844a9ea8178… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:f4ad45ac6bd3b4821300b2169de7597b656b3aae4a32679a1effef45f7af096f · sha256:ad13f844a9ea8178… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:f4ad45ac6bd3b4821300b2169de7597b656b3aae4a32679a1effef45f7af096f · sha256:ad13f844a9ea8178… · /containers/cna/affected/0

Source references

6 source assertions

{"url":"https://git.kernel.org/stable/c/02f33c2062c75e28abc7ad58ce86451cf3140455"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:f4ad45ac6bd3b4821300b2169de7597b656b3aae4a32679a1effef45f7af096f · sha256:ad13f844a9ea8178… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/18ec7d7785be7a4ee8ea11e355122282caad4267"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:f4ad45ac6bd3b4821300b2169de7597b656b3aae4a32679a1effef45f7af096f · sha256:ad13f844a9ea8178… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/91095474eea29b95c9a8bceb9b501a2702b6c55f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:f4ad45ac6bd3b4821300b2169de7597b656b3aae4a32679a1effef45f7af096f · sha256:ad13f844a9ea8178… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/d7c71dfd4b80f0eacac2c157a8a3a4c6e8b2e0d1"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:f4ad45ac6bd3b4821300b2169de7597b656b3aae4a32679a1effef45f7af096f · sha256:ad13f844a9ea8178… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/e64d170346d00b580c0043de3e5ccb3e331c47d4"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:f4ad45ac6bd3b4821300b2169de7597b656b3aae4a32679a1effef45f7af096f · sha256:ad13f844a9ea8178… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/f6538a318947b627710b08a268bc80a48c23bde7"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:f4ad45ac6bd3b4821300b2169de7597b656b3aae4a32679a1effef45f7af096f · sha256:ad13f844a9ea8178… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer