CVE-2026-97418
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/09/2026
Last modified:
25/09/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ALSA: es18xx: check control allocation before private data setup<br />
<br />
snd_es18xx_mixer() creates controls with snd_ctl_new1() and then stores<br />
bookkeeping pointers or sets private_free before calling snd_ctl_add().<br />
snd_ctl_new1() can return NULL on allocation failure, so those writes<br />
can dereference a NULL control pointer.<br />
<br />
Check the returned control pointers before using them and return -ENOMEM<br />
on allocation failure.


