CVE-2026-64133 ALSA: asihpi: Fix potential OOB array access at reading cache

🗓️ 19 Jul 2026 15:40:28Reported by LinuxType

Alsa asihpi fixes potential out-of-bounds array access in reading cache with a sanity check in find_control.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-64133	19 Jul 202615:40	–	attackerkb
CVE	CVE-2026-64133	19 Jul 202615:40	–	cve
EUVD	EUVD-2026-45818	19 Jul 202615:40	–	euvd
NVD	CVE-2026-64133	19 Jul 202616:17	–	nvd
OSV	CVE-2026-64133 ALSA: asihpi: Fix potential OOB array access at reading cache	19 Jul 202615:40	–	osv
OSV	DEBIAN-CVE-2026-64133	19 Jul 202616:17	–	osv
OSV	UBUNTU-CVE-2026-64133	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61450	19 Jul 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-64133	20 Jul 202610:59	–	redhatcve

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "sound/pci/asihpi/hpicmn.c"
    ],
    "versions": [
      {
        "version": "719f82d3987aad4cc9f46d19c35f362672545cad",
        "lessThan": "e060e21fe9cca1e5eafd8a1c597026577771e8d9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "719f82d3987aad4cc9f46d19c35f362672545cad",
        "lessThan": "34d0d492a2812b9289af14bca3573a89275965b2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "719f82d3987aad4cc9f46d19c35f362672545cad",
        "lessThan": "ffa29cea7bf9a4ef2ea8084967f142e0301ac670",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "719f82d3987aad4cc9f46d19c35f362672545cad",
        "lessThan": "7b6f8c8eb93f02a74b1de8e521c0952af10d1f43",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "719f82d3987aad4cc9f46d19c35f362672545cad",
        "lessThan": "8778386e4387b28f2bf8425d7ffc667c6294457f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "719f82d3987aad4cc9f46d19c35f362672545cad",
        "lessThan": "61c5017c64e2ac9e10b70b14b17a079dbc0a805f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "719f82d3987aad4cc9f46d19c35f362672545cad",
        "lessThan": "7d107239935793995bdc6cf29bb99e180bde4c28",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "719f82d3987aad4cc9f46d19c35f362672545cad",
        "lessThan": "7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "sound/pci/asihpi/hpicmn.c"
    ],
    "versions": [
      {
        "version": "2.6.35",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.35",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.258",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.209",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.142",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.92",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.34",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.11",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/e060e21fe9cca1e5eafd8a1c597026577771e8d9
git	www.git.kernel.org/stable/c/8778386e4387b28f2bf8425d7ffc667c6294457f
git	www.git.kernel.org/stable/c/7b6f8c8eb93f02a74b1de8e521c0952af10d1f43
git	www.git.kernel.org/stable/c/61c5017c64e2ac9e10b70b14b17a079dbc0a805f
git	www.git.kernel.org/stable/c/34d0d492a2812b9289af14bca3573a89275965b2
git	www.git.kernel.org/stable/c/7d107239935793995bdc6cf29bb99e180bde4c28
git	www.git.kernel.org/stable/c/ffa29cea7bf9a4ef2ea8084967f142e0301ac670
git	www.git.kernel.org/stable/c/7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f

20 Jul 2026 13:43Current

CVSS 3.17.8

EPSS0.00176