CVE-2026-64480EPSS p10.8%
CVE-2026-64480CVE-2026-64480
Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: ice1712: check snd_ctl_new1() return value
snd_ctl_new1() can return NULL when memory allocation fails. The
ice1712 driver calls snd_ctl_new1() without checking the return value
before dereferencing the pointer in multiple places (ice1712.c,
ice1724.c, aureon.c), which can lead to NULL pointer dereferences.
Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any
fails.
Scoring
| EPSS | 0.21% probability of exploitation · percentile 10.8% · 2026-10-05T12:00:23Z |
| Last modified | 2026-08-17 |