CVE-2026-64134 Details
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus iov_iter for silencing At transition to the iov_iter for PCM data transfer, we blindly applied the iov_iter setup also for silencing (i.e. data = NULL), and it leads to a calculation of bogus iov_iter. Fortunately this didn't cause troubles on most of architectures but it goes wrong on RISC-V now, causing a NULL dereference. Handle the NULL data case to treat the silencing in interleaved_copy() for addressing the bug above. noninterleaved_copy() has already the NULL data handling, so it doesn't need changes.
A vulnerability in the Linux kernel's Advanced Linux Sound Architecture (ALSA) component for Pulse Code Modulation (PCM) data transfer has been addressed. The issue arose because the kernel improperly set up the IOV iterator for silencing operations, leading to the calculation of an incorrect IOV iterator. While this flaw did not cause problems on most architectures, it resulted in a NULL dereference on RISC-V. The vulnerability has been fixed by properly handling the NULL data case during the silencing process in the interleaved_copy function, while the noninterleaved_copy function already managed NULL data appropriately.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/41a766c647294842c9b17672449f8e011048cba9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c9f6768515818d71bdfc20119a81f3332c53b9c6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ce836587e594af39ff048d9b29dee0f5f10692c9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/e4d3386b74fba8e01280484b67ee481ece00201e | kernel.org | Patch |
| https://git.kernel.org/stable/c/feff0251386aa6bb180a0a1cf7c1f91ba868113d | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.6, < 6.6.142 >= 6.7, < 6.12.92 >= 6.13, < 6.18.34 >= 6.19, < 7.0.11 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 13, 2026 | Initial Analysis | [email protected] |
| Jul 20, 2026 | CVE Modified | kernel.org |
| Jul 19, 2026 | New CVE Received | kernel.org |