OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-64480

UNKNOWN · CVSS N/A EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

The ice1712 driver in the Linux kernel is vulnerable due to insufficient checks for NULL return values from the snd_ctl_new1() function, which can lead to NULL pointer dereferences. This flaw may result in system crashes or instability when memory allocation fails. Linux system administrators and developers utilizing the affected drivers should prioritize applying the fix to mitigate potential disruptions.

CVE
CVE-2026-64480
Severity
UNKNOWN
CVSS
N/A
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. The ice1712 driver calls snd_ctl_new1() without checking the return value before dereferencing the pointer in multiple places (ice1712.c, ice1724.c, aureon.c), which can lead to NULL pointer dereferences. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.