Junglewise Threat Intelligence

CVE-2026-64488: Linux Kernel ALSA aoa NULL pointer dereference in layout.c

CVE-2026-64488 · Severity: info · CVSS 4.4 · Published 2026-07-25

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability was identified in the Linux kernel's Apple Onboard Audio (AOA) driver. Under specific low-memory conditions, the system could experience a crash (kernel panic) when attempting to initialize audio components. This issue primarily affects the stability and availability of systems using this specific audio hardware driver.

Technical details

A NULL pointer dereference vulnerability exists in the Linux kernel's ALSA (Advanced Linux Sound Architecture) subsystem, specifically within the Apple Onboard Audio (aoa) fabric driver. The function `layout_attached_codec` in `sound/aoa/fabrics/layout.c` calls `snd_ctl_new1()` to allocate new control structures but fails to validate the return value. If memory allocation fails, the function continues to dereference the resulting NULL pointer when accessing `ctl->id.name` or passing it to `aoa_snd_ctl_add()`. This can be triggered during codec attachment, leading to a kernel oops or panic. Patches have been released across multiple stable kernel branches to add the necessary NULL checks.

Affected products

  • Linux Linux Kernel 2.6.18 to 6.6.145

Timeline

  • 2026-05-27: other: Initial patch authored
  • 2026-07-24: patched: Patches committed to stable branches
  • 2026-07-25: disclosed: CVE published

References

Related threats