CVE-2026-64133 (CVSS 7.8)

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_control() to retrieve a cached info accesses the array with the given index blindly, which may lead to an OOB array access. Add a sanity check for avoiding it.

Is your site exposed to CVE-2026-64133?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0013

Probability of exploitation

0.03%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/34d0d492a2812b9289af14bca3573a89275965b2 https://git.kernel.org/stable/c/61c5017c64e2ac9e10b70b14b17a079dbc0a805f https://git.kernel.org/stable/c/7b6f8c8eb93f02a74b1de8e521c0952af10d1f43 https://git.kernel.org/stable/c/7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f https://git.kernel.org/stable/c/7d107239935793995bdc6cf29bb99e180bde4c28 https://git.kernel.org/stable/c/8778386e4387b28f2bf8425d7ffc667c6294457f https://git.kernel.org/stable/c/e060e21fe9cca1e5eafd8a1c597026577771e8d9 https://git.kernel.org/stable/c/ffa29cea7bf9a4ef2ea8084967f142e0301ac670

Frequently Asked Questions

What is CVE-2026-64133? +

In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_control() to retrieve a cached info accesses the array with the given index blindly, which may lead to an OOB array access. Add a sanity check for avoiding it. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2026-64133? +

CVE-2026-64133 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0013, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-64133? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-64133