CVE-2026-64486: ALSA: cmipci: check snd_ctl_new1() return value

CVE-2026-64486: ALSA: cmipci: check snd_ctl_new1() return value

[Greg Kroah-Hartman]

From: Greg Kroah-Hartman <gregkh@kernel.org>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

ALSA: cmipci: check snd_ctl_new1() return value

snd_ctl_new1() can return NULL when memory allocation fails.
snd_cmipci_spdif_controls() does not check the return value before
dereferencing kctl->id.device, which can lead to a NULL pointer
dereference.

Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any
fails.

The Linux kernel CVE team has assigned CVE-2026-64486 to this issue.


Affected and fixed versions
===========================

	Issue introduced in 6.1.34 with commit 3454490e0396191f8f9c215fccf5deef76abffb5 and fixed in 6.1.178 with commit b44888c33c4f11277d0e5e023338f2740232a4ed
	Issue introduced in 6.4 with commit f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 and fixed in 6.6.145 with commit 8825a06bfa7932a7a74dec01669d405df0b47286
	Issue introduced in 6.4 with commit f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 and fixed in 6.12.96 with commit 4dd5b0b1a52a8d6e59a3f217204817228ce0238b
	Issue introduced in 6.4 with commit f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 and fixed in 6.18.39 with commit af2b009b773bc42995546507963e5e78970dc3ed
	Issue introduced in 6.4 with commit f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 and fixed in 7.1.4 with commit 67e9ea92cd598cba1783ff701553c776a6cedee9
	Issue introduced in 6.4 with commit f2f312ad88c68a7f4a7789b9269ae33af3c7c7e9 and fixed in 7.2-rc1 with commit c205bd1b28fb7e5f1061a4e78813fad7d315cb3e
	Issue introduced in 6.3.8 with commit 7bf12707fa3db4c14fbe8ab93efb421d8ca93bf8

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2026-64486
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	sound/pci/cmipci.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/b44888c33c4f11277d0e5e023338f2740232a4ed
	https://git.kernel.org/stable/c/8825a06bfa7932a7a74dec01669d405df0b47286
	https://git.kernel.org/stable/c/4dd5b0b1a52a8d6e59a3f217204817228ce0238b
	https://git.kernel.org/stable/c/af2b009b773bc42995546507963e5e78970dc3ed
	https://git.kernel.org/stable/c/67e9ea92cd598cba1783ff701553c776a6cedee9
	https://git.kernel.org/stable/c/c205bd1b28fb7e5f1061a4e78813fad7d315cb3e