Not yet scoredPublished Jul 25, 2026

CVE-2026-64480ALSA: ice1712: check snd_ctl_new1() return value

Updated under an hour ago (Oct 26, 2026, 8:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. The ice1712 driver calls snd_ctl_new1() without checking the return value before dereferencing the pointer in multiple places (ice1712.c, ice1724.c, aureon.c), which can lead to NULL pointer dereferences. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 0df0097ea2d52401c31e550389ac758c90e6a1eb before 57d59be545b309d4bb54ac472b15d1e67f254d95; from b9a4efd61b6b9f62f83752959e75a5dae20624fa before 69bf1dfa3215524c4ae255bb9dce0770875abbeb; from b9a4efd61b6b9f62f83752959e75a5dae20624fa before d34ad480b8896d2b486e2cf29ce1790326cad205; from b9a4efd61b6b9f62f83752959e75a5dae20624fa before 71b87108ad93d433cdb20704a8dc8852304cf2c2; from b9a4efd61b6b9f62f83752959e75a5dae20624fa before 38a7cc46370a57122fb29c4bfe48a851c0c64459; from b9a4efd61b6b9f62f83752959e75a5dae20624fa before 2b929b91b0f3bc6de8a844370049cd99ee8e31ff; 286e17a1c3baeb1b1cd36b63ee16e8a6e63d558e; from 6.1.34 before 6.1.178; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/57d59be545b309d4bb54ac472b15d1e67f254d95
https://git.kernel.org/stable/c/69bf1dfa3215524c4ae255bb9dce0770875abbeb
https://git.kernel.org/stable/c/d34ad480b8896d2b486e2cf29ce1790326cad205
https://git.kernel.org/stable/c/71b87108ad93d433cdb20704a8dc8852304cf2c2
https://git.kernel.org/stable/c/38a7cc46370a57122fb29c4bfe48a851c0c64459
https://git.kernel.org/stable/c/2b929b91b0f3bc6de8a844370049cd99ee8e31ff

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.