cve 2026 64133

The cve 2026 64133 tag covers a Linux kernel vulnerability in the ALSA driver used with AudioScience ASI professional audio hardware. The issue involves a potential out-of-bounds array access in the snd-asihpi driver’s cached-control lookup path and is addressed by adding a sanity check before an index is used. Although the flaw carries a CVSS v3.1 score of 7.8 High, its practical scope is limited for typical Windows PC users because it is not a direct Windows vulnerability. The main concerns are patching and asset discovery for organizations running Linux-based broadcast, radio, production, telephony, or specialist audio systems with affected AudioScience cards.