Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-99068

ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers Commit e576e7843c0d ("ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions") centralized the DAO input mapper clearing logic in dao_clear_input(), but omitted the kfree() calls. It removes the mapper entries from the list and sets their pointers to NULL without freeing the allocated array. This leaks memory each time dao_clear_input() is called. Store the base pointer of the allocation before clearing the mapper entries and free the array after removing entries from the list.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 to < f7dc71c1ce885f5d9f128037ebc75d9c0356e060affected
  • e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 to < 0919d8dd19f92e12829055c75fced9a454d644bfaffected
  • e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 to < 593d46fc6af9a0178a46e77d6d24b20d2314165faffected

Linux Linux

Default version status: affected

  • 6.14affected
  • 0 to < 6.14unaffected
  • 6.18.57 to ≤ 6.18.*unaffected
  • 7.2.11 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References