Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CVE-2026-64486: Linux kernel audio driver can crash on low memory
CVE-2026-64486 · published 3 months ago
Summary
Several Linux kernel packages from Canonical may experience a crash when the audio driver runs out of memory. The problem occurs because the code does not check for a failed memory allocation before using the result. Updating to the latest kernel version that includes the fix will prevent the crash.
What to do
- Update debian linux to version 6.12.96-1.
- Update linux kernel to version 7.1.4.
- Update canonical linux-aws-7.0 to version 7.0.0-1012.12~24.04.1.
- Update canonical linux-gcp-7.0 to version 7.0.0-1011.11~24.04.1.
- Update canonical linux-hwe-7.0 to version 7.0.0-31.31~24.04.1.
- Update canonical linux-nvidia-7.0 to version 7.0.0-1018.18~24.04.1.
- Update canonical linux-riscv-7.0 to version 7.0.0-31.31.1~24.04.1.
- Update canonical linux to version 7.0.0-31.31.
- Update canonical linux-aws to version 7.0.0-1012.12.
- Update canonical linux-gcp to version 7.0.0-1011.11.
- Update canonical linux-gke to version 7.0.0-1006.7.
- Update canonical linux-oem-7.0 to version 7.0.0-1013.13.
- Update canonical linux-realtime to version 7.0.0-31.31.1.
- Update canonical linux-riscv to version 7.0.0-31.31.1.
- Update canonical linux-raspi to version 7.0.0-1019.19.
- Update canonical linux-azure-7.0 to version 7.0.0-1014.14~24.04.1.
- Update canonical linux-azure to version 7.0.0-1014.14.
- Update canonical linux-ibm to version 7.0.0-1013.13.
- Update canonical linux-nvidia to version 7.0.0-1018.18.
- Update canonical linux-nvidia-bos to version 7.0.0-2018.18.
- Update canonical linux-oracle to version 7.0.0-1011.11.
- Update canonical linux-oracle-7.0 to version 7.0.0-1011.11~24.04.1.
- Update debian linux to version 6.1.180-1.
- Update debian linux to version 7.1.4-1.
- Update debian linux-6.12 to version 6.12.100-1~deb12u1.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update linux to version 5.15.0-202.212.aikido.118.
- Update rootio-linux to version 5.15.0-202.212.aikido.118.
- Update linux linux to version b44888c33c4f11277d0e5e023338f2740232a4ed or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 | All versions |
Showing 50 of 173. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-7.0 |
< 7.0.0-1012.12~24.04.1 Fix: upgrade to 7.0.0-1012.12~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-31.31~24.04.1 Fix: upgrade to 7.0.0-31.31~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 |
< 7.0.0-1018.18~24.04.1 Fix: upgrade to 7.0.0-1018.18~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-7.0 |
< 7.0.0-31.31.1~24.04.1 Fix: upgrade to 7.0.0-31.31.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-31.31 Fix: upgrade to 7.0.0-31.31
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1012.12 Fix: upgrade to 7.0.0-1012.12
|
| Ubuntu:26.04:LTS | canonical | linux-azure |
< 7.0.0-1014.14 Fix: upgrade to 7.0.0-1014.14
|
| Ubuntu:26.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
|
| Ubuntu:26.04:LTS | canonical | linux-gke |
< 7.0.0-1006.7 Fix: upgrade to 7.0.0-1006.7
|
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia |
< 7.0.0-1018.18 Fix: upgrade to 7.0.0-1018.18
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos |
< 7.0.0-2018.18 Fix: upgrade to 7.0.0-2018.18
|
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
|
| – | linux | linux |
< b44888c33c4f11277d0e5e023338f2740232a4ed 6.4 |
| Debian:12 | debian | linux |
< 6.1.180-1 Fix: upgrade to 6.1.180-1
|
| Debian:13 | debian | linux |
< 6.12.96-1 Fix: upgrade to 6.12.96-1
|
| Debian:14 | debian | linux |
< 7.1.4-1 Fix: upgrade to 7.1.4-1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-7.0 |
< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:26.04:LTS | canonical | linux-raspi |
< 7.0.0-1019.19 Fix: upgrade to 7.0.0-1019.19
|
| Ubuntu:26.04:LTS | canonical | linux-realtime |
< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
|
| Linux | linux | kernel |
>= 6.13.0, < 7.1.4 Fix: upgrade to 7.1.4
|
| Debian:12 | debian | linux-6.12 |
< 6.12.100-1~deb12u1 Fix: upgrade to 6.12.100-1~deb12u1
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Ubuntu:24.04:LTS | canonical | linux-vmware | All versions |
Original advisory text
CVE-2026-64486 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_cmipci_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.
References
- https://git.kernel.org/stable/c/4dd5b0b1a52a8d6e59a3f217204817228ce0238b
- https://git.kernel.org/stable/c/67e9ea92cd598cba1783ff701553c776a6cedee9
- https://security-tracker.debian.org/tracker/CVE-2026-64486 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-64486 Third Party Advisory
- https://git.kernel.org/linus/c205bd1b28fb7e5f1061a4e78813fad7d315cb3e Third Party Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64486... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-64486 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/notices/USN-8726-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8727-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8760-1 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-64486 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8726-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8726-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8800-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8760-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8726-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-3 Vendor Advisory
- https://git.kernel.org/stable/c/8825a06bfa7932a7a74dec01669d405df0b47286
- https://git.kernel.org/stable/c/af2b009b773bc42995546507963e5e78970dc3ed
- https://git.kernel.org/stable/c/b44888c33c4f11277d0e5e023338f2740232a4ed
- https://git.kernel.org/stable/c/c205bd1b28fb7e5f1061a4e78813fad7d315cb3e
Timeline
Published25 Jul 2026
Updated4 Nov 2026
First seen25 Jul 2026
Sources
CVE-2026-64486 · NVD
CVE-2026-64486 · MITRE
DEBIAN-CVE-2026-64486 · OSV
UBUNTU-CVE-2026-64486 · OSV
CVE-2026-64486 · OSV
Track software like this
Free during beta