{"id":"CVE-2026-64133","summary":"ALSA: asihpi: Fix potential OOB array access at reading cache","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: asihpi: Fix potential OOB array access at reading cache\n\nfind_control() to retrieve a cached info accesses the array with the\ngiven index blindly, which may lead to an OOB array access.\nAdd a sanity check for avoiding it.","modified":"2026-07-22T03:31:43.229450706Z","published":"2026-07-19T15:40:28.277Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64133.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/34d0d492a2812b9289af14bca3573a89275965b2"},{"type":"WEB","url":"https://git.kernel.org/stable/c/61c5017c64e2ac9e10b70b14b17a079dbc0a805f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7b6f8c8eb93f02a74b1de8e521c0952af10d1f43"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7d107239935793995bdc6cf29bb99e180bde4c28"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8778386e4387b28f2bf8425d7ffc667c6294457f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e060e21fe9cca1e5eafd8a1c597026577771e8d9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ffa29cea7bf9a4ef2ea8084967f142e0301ac670"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64133.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64133"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"719f82d3987aad4cc9f46d19c35f362672545cad"},{"fixed":"e060e21fe9cca1e5eafd8a1c597026577771e8d9"},{"fixed":"34d0d492a2812b9289af14bca3573a89275965b2"},{"fixed":"ffa29cea7bf9a4ef2ea8084967f142e0301ac670"},{"fixed":"7b6f8c8eb93f02a74b1de8e521c0952af10d1f43"},{"fixed":"8778386e4387b28f2bf8425d7ffc667c6294457f"},{"fixed":"61c5017c64e2ac9e10b70b14b17a079dbc0a805f"},{"fixed":"7d107239935793995bdc6cf29bb99e180bde4c28"},{"fixed":"7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-64133.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.35"},{"fixed":"5.10.258"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.209"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.175"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.142"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.92"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.34"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.0.11"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-64133.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}