CVE-2026-64133 Details
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_control() to retrieve a cached info accesses the array with the given index blindly, which may lead to an OOB array access. Add a sanity check for avoiding it.
A potential out-of-bounds (OOB) array access vulnerability has been identified in the Linux kernel's Advanced Linux Sound Architecture (ALSA) subsystem, specifically within the asihpi driver. This issue arises because the find_control() function accesses an array using a specified index without proper validation, which can lead to out-of-bounds access. The vulnerability affects several versions of the Linux kernel.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been patched. The patch adds a sanity check to the find_control() function to prevent out-of-bounds access by validating the control_index against the control_count.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/34d0d492a2812b9289af14bca3573a89275965b2 | kernel.org | Patch |
| https://git.kernel.org/stable/c/61c5017c64e2ac9e10b70b14b17a079dbc0a805f | kernel.org | Patch |
| https://git.kernel.org/stable/c/7b6f8c8eb93f02a74b1de8e521c0952af10d1f43 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f | kernel.org | Patch |
| https://git.kernel.org/stable/c/7d107239935793995bdc6cf29bb99e180bde4c28 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8778386e4387b28f2bf8425d7ffc667c6294457f | kernel.org | Patch |
| https://git.kernel.org/stable/c/e060e21fe9cca1e5eafd8a1c597026577771e8d9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ffa29cea7bf9a4ef2ea8084967f142e0301ac670 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.35, < 5.10.258 >= 5.11, < 5.15.209 >= 5.16, < 6.1.175 >= 6.2, < 6.6.142 >= 6.7, < 6.12.92 >= 6.13, < 6.18.34 >= 6.19, < 7.0.11 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 13, 2026 | Initial Analysis | [email protected] |
| Jul 20, 2026 | CVE Modified | kernel.org |
| Jul 20, 2026 | CVE Modified | kernel.org |
| Jul 19, 2026 | New CVE Received | kernel.org |