CVE-2026-64483: Linux kernel · ALSA: firewire: isight: bound the sample count to the packet payload
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 3 Nov 2026, 19:28 UTC
Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or noneExploitation evidence
Disclosed: evidence found.
CVE published 25 Jul 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 3 Nov 2026.
What to do
AI-suggested
A fix has been implemented in the Linux kernel ALSA firewire isight driver by bounding the sample count to MAX_FRAMES_PER_PACKET. Users should update to the fixed kernel version containing this patch once available. No other mitigation steps are indicated.
Description
A vulnerability in the Linux kernel ALSA firewire isight driver allows a malicious or faulty Apple iSight device on the FireWire bus to cause out-of-bounds memory reads and writes during normal capture by not properly bounding the sample count to the packet payload size. This flaw has been resolved by adding a bound to the sample count to prevent reading and writing beyond allocated buffers.
References
- git.kernel.org/stable/c/24423e0a9251d348c3f1fb0bb0e61b879e1e976c (opens in a new tab)
- git.kernel.org/stable/c/ebbffacda6733dcbcef601b5b523460f8d8b671e (opens in a new tab)
- git.kernel.org/stable/c/57e4d9043afc1eaddee8f50d11def6e65415d273 (opens in a new tab)
- git.kernel.org/stable/c/3ed2fa1ed8cc65f910b8bbc0be3cc366b30f8478 (opens in a new tab)
- git.kernel.org/stable/c/31da82b9676c6b112e7c72c7529e6812b919742a (opens in a new tab)
- git.kernel.org/stable/c/8e48a29813df8dd71503800b7acf69c12c035045 (opens in a new tab)
- git.kernel.org/stable/c/31a01b70bb90e3ef3147f308e2ea899e1d2485ca (opens in a new tab)
- git.kernel.org/stable/c/29b9667982e4df2ed7744f86b1144f8bb58eb698 (opens in a new tab)