CVE-2026-64489 | Linux Kernel up to 7.1.3 ALSA snd_ctl_new1 null pointer dereference

July 25, 2026 Yanac

A vulnerability identified as critical has been detected in Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3. This vulnerability affects the function snd_ctl_new1 of the component ALSA. This manipulation causes null pointer dereference.

This vulnerability is tracked as CVE-2026-64489. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More