In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_cmipci_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture (ALSA) cmipci component. This vulnerability occurs because the `snd_cmipci_spdif_controls()` function fails to check the return value of `snd_ctl_new1()`, which can return a null pointer if memory allocation fails. A local attacker could exploit this to trigger a null pointer dereference, leading to a system crash and a denial of service (DoS).

Red Hat Enterprise Linux 10 Fix deferred kernel Red Hat Enterprise Linux 6 Out of support scope kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Fix deferred kernel Red Hat Enterprise Linux 8 Fix deferred kernel-rt Red Hat Enterprise Linux 9 Fix deferred kernel Red Hat Enterprise Linux 9 Fix deferred kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-64486 https://nvd.nist.gov/vuln/detail/CVE-2026-64486 https://lore.kernel.org/linux-cve-announce/2026072549-CVE-2026-64486-a656@gregkh/T