Answer in brief
CVE-2026-64001 records a High severity (CVSS 7.8) vulnerability in ALSA: pcm: oss: Fix setup list UAF on proc write error. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=060d77b9c04acd7aef60790398a53f731db8c8fe <d9df965284abde27ba6bfbdfc8407697cf6802f1 || >=060d77b9c04acd7aef60790398a53f731db8c8fe <8be4efd0dc0093eb7a02ad1aac936bca2a1f04ce || >=060d77b9c04acd7aef60790398a53f731db8c8fe <e13922bb97b4e6f94f8ac02d034f2d4bd65eeb3c || >=060d77b9c04acd7aef60790398a53f731db8c8fe <be387230dc22d870afd0e5d35912b07c2bc323bd || >=060d77b9c04acd7aef60790398a53f731db8c8fe <4cc54bdd54b337e77115be5b55577d1c58608eae | d9df965284abde27ba6bfbdfc8407697cf6802f1, 8be4efd0dc0093eb7a02ad1aac936bca2a1f04ce, e13922bb97b4e6f94f8ac02d034f2d4bd65eeb3c, be387230dc22d870afd0e5d35912b07c2bc323bd, 4cc54bdd54b337e77115be5b55577d1c58608eae |
| Linux/Linuxgeneric | 2.6.17 | Not reported |
Published upstream
Jul 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 21, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 10, 2026
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error snd_pcm_oss_proc_write() links a newly allocated setup entry into the OSS setup list before duplicating the task name. If the task-name allocation fails, the error path frees the already linked entry and leaves setup_list pointing at freed memory. A later OSS device open can then walk the stale list entry in snd_pcm_oss_look_for_setup() and dereference freed memory. Allocate the task name and initialize the setup entry before publishing the entry on setup_list. Also fetch the initial proc read iterator only after taking setup_mutex, so all setup_list traversal follows the same list lifetime rules.
Quoted source text, attributed separately from HOL analysis.