CVE-2026-64001Patch(linux / linux_kernel)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error snd_pcm_oss_proc_write() links a newly allocated setup entry into the OSS setup list before duplicating the task name. If the task-name allocation fails, the error path frees the already linked entry and leaves setup_list pointing at freed memory. A later OSS device open can then walk the stale list entry in snd_pcm_oss_look_for_setup() and dereference freed memory. Allocate the task name and initialize the setup entry before publishing the entry on setup_list. Also fetch the initial proc read iterator only after taking setup_mutex, so all setup_list traversal follows the same list lifetime rules.

linux CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

linux_kernel

Threat summary

Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 3 signals
Peaked 1d ago at 2 mentions (2026-07-19); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

linux

Products

linux_kernel

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Patch

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-19	2	Patch2
2026-07-21	1	Patch1

Full discourse3 posts

Windows Forum@windowsforum90d
Patch
🔊 Linux just patched a decades-old audio compatibility layer where a failed allocation could leave the kernel pointing at freed memory. Legacy code: still finding new ways to haunt your speakers. https://windowsforum.com/threads/cve-2026-64001-fixes-linux-alsa-oss-use-after-free.439790/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LinuxKernel #KernelVulnerabilities #AlsaSecurity #Wsl2 https://t.co/ntbpH9OjMb
Post summary
The tweet announces that Linux ALSA OSS has been patched to fix a decades‑old use‑after‑free vulnerability in the audio compatibility layer.
0100013
1.3K followersView on X
Infoflowcloud@infoflowcloud92d
Patch
🚨*CVE* CVE-2026-64001 In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error snd_pcm_oss_proc_write() links a newly al… https://www.cve.org/CVERecord?id=CVE-2026-64001 ----- Traducción: CVE-2026-64001 En … http://infoflow.cloud`
Post summary
CVE‑2026‑64001, a use‑after‑free in ALSA’s pcm:OSS module, has been fixed in the Linux kernel; no PoC, exploit, or active exploitation claims are mentioned.
0000050
92 followersView on X
CVE@CVEnew92d
Patch
CVE-2026-64001 In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error snd_pcm_oss_proc_write() links a newly al… https://www.cve.org/CVERecord?id=CVE-2026-64001
Post summary
CVE-2026-64001, affecting the ALSA pcm OSS component of the Linux kernel, is resolved via a patch addressing a use‑after‑free error on proc write; no PoC, exploit, or active exploitation is referenced.
00000684
57.8K followersView on X

CPE platform detail6 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

6 of 6 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	linux	linux_kernel	-	-	-
OS	linux	linux_kernel	7.1	-	-
OS	linux	linux_kernel	7.1	-	-
OS	linux	linux_kernel	7.1	-	-
OS	linux	linux_kernel	7.1	-	-
OS	linux	linux_kernel	7.1	-	-

Explore more

Back to dashboard linux CVEs linux_kernel vulnerabilities