01 Record

CVE-2026-64478

ALSA: usb-audio: avoid kobject path lookup in DualSense match

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

ALSA: usb-audio: avoid kobject path lookup in DualSense match

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.18% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 8.0% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-08-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-07-25 08:51Z3 MO AGO

Last updated

2026-08-17 04:56Z2 MO AGO

Reserved

2026-07-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

215c4d3eae8f4fdf1a8e9b3c63dceda3c1b4380cd6dda7953e42f46287194e3b

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxd0b0264009596c07a77d82808b0dae72bc04ac5c to < e4c66a149c408e44e60bfec3fabf08b6b7abbc60, b4b94f092f193d7a2db8e82af5e51519ae89963c to < 4566bf8ae9dbfe81bdc2ff1702d59db8a233b06e, c2d5b0a6c688ffb32c35627e337fbbcc65bc275f to < 662a1d7b5affc424ea4f4bc20dd99be29e687886, d04d301614630724feb4048bf17432fc7964fe74 to < a47ecd904c51ae6a42957feb3cf2f4266adee2e5, a705899ec6085b12a33aa0fd94a58e82e9e90502 to < c1da6d3f45036fa63672ee04ad97cb526b40b987, 79d561c4ec0497669f19a9550cfb74812f60938b to < a263eb12cbe2e208e6e637df0f9b0be9a484158e, 79d561c4ec0497669f19a9550cfb74812f60938b to < 4246dd043b7a4f8e3bc1d2896e81d11220610eda, 79d561c4ec0497669f19a9550cfb74812f60938b to < 7693c0cc415f3a16a7a3355f245474a5e661be4e, 104ad9bae11ee450fb7d0595ff7876cfb6527838, 0105cfc41abeb428d4405951a20e1e239bea5e1d, 5.10.245 to < 5.10.261, 5.15.194 to < 5.15.212, 6.1.155 to < 6.1.178, 6.6.109 to < 6.6.145, 6.12.50 to < 6.12.96, 5.4.300 to < 5.5, 6.16.10 to < 6.17, 6.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/e4c66a149c408e44e60bfec3fabf08b6b7abbc60
git.kernel.orghttps://git.kernel.org/stable/c/4566bf8ae9dbfe81bdc2ff1702d59db8a233b06e
git.kernel.orghttps://git.kernel.org/stable/c/662a1d7b5affc424ea4f4bc20dd99be29e687886
git.kernel.orghttps://git.kernel.org/stable/c/a47ecd904c51ae6a42957feb3cf2f4266adee2e5
git.kernel.orghttps://git.kernel.org/stable/c/c1da6d3f45036fa63672ee04ad97cb526b40b987
git.kernel.orghttps://git.kernel.org/stable/c/a263eb12cbe2e208e6e637df0f9b0be9a484158e
git.kernel.orghttps://git.kernel.org/stable/c/4246dd043b7a4f8e3bc1d2896e81d11220610eda
git.kernel.orghttps://git.kernel.org/stable/c/7693c0cc415f3a16a7a3355f245474a5e661be4e

07 Fixed in

Debian 12

linux
Fixed in 6.1.180-1
linux-6.12
Fixed in 6.12.100-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.96-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.