In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_control() to… (CVE-2026-64133)
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_control() to retrieve a cached info accesses the array with the given index blindly, which may lead to an OOB array access. Add a sanity check for avoiding it.
AI Analysis
Technical Summary
The Linux kernel ALSA asihpi component contained a vulnerability where the find_control() function accessed an array with an index provided without validation, potentially causing out-of-bounds array access. This could lead to memory corruption or crashes. The vulnerability has been fixed by introducing a sanity check to validate the index before accessing the array.
Potential Impact
The vulnerability could allow out-of-bounds memory access in the ALSA asihpi driver, potentially causing kernel crashes or memory corruption. No known exploits are reported in the wild. The impact is limited to systems using the affected ALSA asihpi component in the Linux kernel.
Mitigation Recommendations
A fix has been implemented to add a sanity check preventing out-of-bounds array access. Users should apply the official Linux kernel updates that include this fix when available. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisories for the current remediation status.
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_control() to… (CVE-2026-64133)
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_control() to retrieve a cached info accesses the array with the given index blindly, which may lead to an OOB array access. Add a sanity check for avoiding it.
CVSS v3.1
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel ALSA asihpi component contained a vulnerability where the find_control() function accessed an array with an index provided without validation, potentially causing out-of-bounds array access. This could lead to memory corruption or crashes. The vulnerability has been fixed by introducing a sanity check to validate the index before accessing the array.
Potential Impact
The vulnerability could allow out-of-bounds memory access in the ALSA asihpi driver, potentially causing kernel crashes or memory corruption. No known exploits are reported in the wild. The impact is limited to systems using the affected ALSA asihpi component in the Linux kernel.
Mitigation Recommendations
A fix has been implemented to add a sanity check preventing out-of-bounds array access. Users should apply the official Linux kernel updates that include this fix when available. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisories for the current remediation status.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-83jv-88wq-p97h
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64133"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27a82a4a8d598912af0b
Added to database: 07/19/2026, 19:38:16 UTC
Last enriched: 07/19/2026, 19:45:41 UTC
Last updated: 07/20/2026, 19:41:21 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.