CVE-2026-97418

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/09/2026
Last modified:
25/09/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ALSA: es18xx: check control allocation before private data setup<br /> <br /> snd_es18xx_mixer() creates controls with snd_ctl_new1() and then stores<br /> bookkeeping pointers or sets private_free before calling snd_ctl_add().<br /> snd_ctl_new1() can return NULL on allocation failure, so those writes<br /> can dereference a NULL control pointer.<br /> <br /> Check the returned control pointers before using them and return -ENOMEM<br /> on allocation failure.

Impact