CVE-2026-64484

In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndes1938mixer does not check the return value before dereferencing the pointer, which can lead to a NULL pointer dereference. A...

CVE-2026-64484

The CVE-2026-64484 issue affects the Linux kernel ALSA es1938: snd_ctl_new1() can return NULL on memory allocation failure, and snd_es1938_mixer() dereferences that pointer without checking. The fix adds a NULL check after snd_ctl_new1() and returns -ENOMEM if allocation fails. This mode is suppo...

CVE-2026-64482

The CVE-2026-64482 issue affects the Linux kernel’s ALSA subsystem (gus) where snd_ctl_new1() can return NULL on memory allocation failure. snd_gf1_pcm_volume_control() previously dereferenced kctl->id.index without verifying the new control node, risking a NULL pointer dereference. The availa...

CVE-2026-64482 ALSA: gus: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndgf1pcmvolumecontrol does not check the return value before dereferencing kctl-id.index, which can lead to a NULL pointer...

EUVD-2026-48826

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndgf1pcmvolumecontrol does not check the return value before dereferencing kctl-id.index, which can lead to a NULL pointer...

CVE-2026-64480 ALSA: ice1712: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. The ice1712 driver calls sndctlnew1 without checking the return value before dereferencing the pointer in multiple places...

CVE-2026-64480

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. The ice1712 driver calls sndctlnew1 without checking the return value before dereferencing the pointer in multiple places...

CVE-2026-64480

CVE-2026-64480 : In the Linux kernel, the ALSA ice1712 family drivers (ice1712.c, ice1724.c, aureon.c) are affected. The root cause is that snd_ctl_new1() can return NULL on memory allocation failure, yet the code dereferenced the result without checks, leading to NULL pointer dereferences. The d...

EUVD-2026-48824

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. The ice1712 driver calls sndctlnew1 without checking the return value before dereferencing the pointer in multiple places...

CVE-2026-64480 ALSA: ice1712: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. The ice1712 driver calls sndctlnew1 without checking the return value before dereferencing the pointer in multiple places...

CVE-2026-64439 crypto: krb5 - filter out async aead implementations at alloc

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...

CVE-2026-64439

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...

EUVD-2026-48783

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...

CVE-2026-64439

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...

CVE-2026-64439

CVE-2026-64439: In the Linux kernel, the krb5 AEAD path could free a buffer while an async AEAD worker still held a pointer, causing a use-after-free (KASAN). The fix filters out async AEAD implementations at allocation time in krb5_aead_encrypt()/krb5_aead_decrypt() and corresponding rfc3961_sim...

CVE-2026-64439 crypto: krb5 - filter out async aead implementations at alloc

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...

EUVD-2026-48957

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation, could a sparse cpupossiblemask lead to an uninitialized pointer free? If cpupossiblemask is sparse for example, CPU 0 and CPU 2 ar...

CVE-2026-64381

The CVE-2026-64381 issue is in the Linux kernel SMB client code path used by receive_encrypted_standard()/receive encrypted standard(): a next_buffer is allocated before validating that the number of compound PDUs has not exceeded MAX_COMPOUND. If the limit check fails, the function returns early...

CVE-2026-64377

In the Linux kernel, the cpufreq: qcom-cpufreq-hw driver has a double-free fix. qcom_cpufreq.data is allocated with devm_kzalloc() as a per-domain array, and qcom_cpufreq_hw_cpu_init() stores a pointer to an element in policy->driver_data. The driver’s exit path previously invoked kfree() on p...

CVE-2026-64357 xfs: fix exchmaps reservation limit check

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfsexchmapsestimateoverhead adds the bmbt and rmapbt overhead to a local resblks variable, but the final UINTMAX check still tests req-resblks. That is the reservation value from before t...