GHSA-83JV-88WQ-P97H

Vulnerability from github – Published: 2026-07-19 18:31 – Updated: 2026-07-20 15:32
VLAI
Details

In the Linux kernel, the following vulnerability has been resolved:

ALSA: asihpi: Fix potential OOB array access at reading cache

find_control() to retrieve a cached info accesses the array with the given index blindly, which may lead to an OOB array access. Add a sanity check for avoiding it.

Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Show details on source website
To clipboard 

{
  "affected": [],
  "aliases": [
    "CVE-2026-64133"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-19T16:17:55Z",
    "severity": "HIGH"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: asihpi: Fix potential OOB array access at reading cache\n\nfind_control() to retrieve a cached info accesses the array with the\ngiven index blindly, which may lead to an OOB array access.\nAdd a sanity check for avoiding it.",
  "id": "GHSA-83jv-88wq-p97h",
  "modified": "2026-07-20T15:32:01Z",
  "published": "2026-07-19T18:31:53Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64133"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/34d0d492a2812b9289af14bca3573a89275965b2"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/61c5017c64e2ac9e10b70b14b17a079dbc0a805f"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7b6f8c8eb93f02a74b1de8e521c0952af10d1f43"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7d107239935793995bdc6cf29bb99e180bde4c28"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/8778386e4387b28f2bf8425d7ffc667c6294457f"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e060e21fe9cca1e5eafd8a1c597026577771e8d9"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ffa29cea7bf9a4ef2ea8084967f142e0301ac670"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.