In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_gf1_pcm_volume_control() does not check the return value before dereferencing kctl->id.index, which can lead to a NULL pointer dereference. Add a NULL check after snd_ctl_new1() and return -ENOMEM if it fails.

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture (ALSA) Gravis Ultrasound (GUS) driver. When memory allocation fails, the `snd_ctl_new1()` function can return a null value. The `snd_gf1_pcm_volume_control()` function does not properly check for this null return, leading to a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a denial of service.

Red Hat Enterprise Linux 10 Not affected kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Not affected kernel Red Hat Enterprise Linux 9 Not affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-64482 https://nvd.nist.gov/vuln/detail/CVE-2026-64482 https://lore.kernel.org/linux-cve-announce/2026072548-CVE-2026-64482-08ac@gregkh/T