What is the CVSS score of EUVD-2026-45818?

EUVD-2026-45818 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by EUVD-2026-45818?

CVE-2026-64133 in the Linux kernel ALSA ASIHPI sound driver allows local users to trigger memory disclosure or kernel crashes through an out-of-bounds array read.. A patch is available.

How to fix or mitigate EUVD-2026-45818?

Within 24 hours, inventory production systems running the ALSA ASIHPI sound driver (check kernel modules and boot configurations). Within 7 days, obtain and test the available kernel patch in a staging environment to ensure compatibility with your Linux distribution and deployed applications. Within 30 days, deploy the patched kernel version across all affected production systems following standard change management, scheduling maintenance windows with system owners as needed.

Linux Kernel EUVD-2026-45818

| CVE-2026-64133 HIGH

Out-of-bounds Read (CWE-125)

2026-07-19 Linux

GHSA-83jv-88wq-p97h

Buffer Overflow Information Disclosure Linux

7.8

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

6.1 MEDIUM

Local low-priv access to a loaded niche driver (AV:L/PR:L/AC:L); an OOB read yields memory disclosure (C:H) and at most a crash (A:L), with no integrity impact (I:N).

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N

SUSE

HIGH

qualitative

Red Hat

5.5 MEDIUM

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 20, 2026 - 17:38 vuln.today

CVSS changed

Jul 20, 2026 - 15:22 NVD

7.8 (HIGH)

Patch available

Jul 19, 2026 - 17:03 EUVD

CVE Published

Jul 19, 2026 - 15:40 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 19, 2026 - 15:40 cve.org

HIGH 7.8

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

ALSA: asihpi: Fix potential OOB array access at reading cache

find_control() to retrieve a cached info accesses the array with the given index blindly, which may lead to an OOB array access. Add a sanity check for avoiding it.

AnalysisAI

Out-of-bounds array read in the Linux kernel's ALSA ASIHPI (AudioScience HPI) sound driver allows a local, low-privileged user to trigger memory disclosure or a kernel crash by requesting a cached control info entry with an unchecked index. The find_control() helper indexed its cache array with a caller-supplied index without bounds validation; the fix adds a sanity check. There is no public exploit identified at time of analysis, EPSS risk is low (0.18%), and it is not listed in CISA KEV, so this is a routine defense-in-depth hardening fix rather than an urgent threat.

Technical ContextAI

The flaw lives in the ALSA (Advanced Linux Sound Architecture) driver for AudioScience HPI audio adapters (sound/pci/asihpi). ALSA control (mixer) elements can cache their info structures; find_control() retrieves a cached entry by index. The vulnerable code trusted the supplied index and dereferenced the cache array directly, an out-of-bounds read (CWE-125-class issue, though the CVE lists CWE as N/A). Because control operations are reachable from user space through the ALSA control ioctl/sysfs interface on an opened sound device, a crafted index can push the read past the allocated array bounds, leaking adjacent kernel memory or faulting. The CPE data identifies the generic cpe:2.3:a:linux:linux product, and the fix spans multiple stable branches.

RemediationAI

Vendor-released patch: update to a fixed Linux stable kernel - 5.10.258, 5.15.209, 6.1.175, 6.6.142, 6.12.92, 6.18.34, 7.0.11, or 7.1 (or later) as matches your branch - via your distribution's kernel update and reboot. The fix commits are available at https://git.kernel.org/stable/c/e060e21fe9cca1e5eafd8a1c597026577771e8d9 and the sibling hashes listed in the references, and details at https://nvd.nist.gov/vuln/detail/CVE-2026-64133. If immediate patching is not possible, a practical compensating control is to unload and blacklist the ASIHPI driver where AudioScience HPI hardware is not in use (add 'blacklist snd-asihpi' to modprobe config), which removes the vulnerable code path with no impact on systems lacking that hardware; on systems that do use ASIHPI, restrict local access and audit which users can open the sound control device, accepting that this only reduces rather than eliminates exposure.

Same weakness CWE-125 – Out-of-bounds Read

View all

CVE-2014-0160 HIGH POC

7.5

CVE-2016-5198 HIGH POC

8.8

CVE-2025-5777 CRITICAL POC

9.3

CVE-2016-1646 HIGH POC

8.8

CVE-2017-5030 HIGH POC

8.8

CVE-2016-4523 HIGH

7.5

CVE-2024-48456 HIGH POC

7.5

CVE-2024-48457 HIGH POC

7.5

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2020-0796 CRITICAL POC

10.0

CVE-2019-11043 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Important

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

EUVD-2026-45818 vulnerability details – vuln.today

Back

Linux Kernel EUVD-2026-45818

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-125 – Out-of-bounds Read

Same technique Buffer Overflow

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code