◆ CVE Hub

CVE-2026-99068

ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers

Published
2026-10-23
Last modified
2026-10-23
CNA
Linux
NVD status
Received

Fetching some sources has been requested. Reload in about a minute to see them.

CVSS v3.1 (listed by NVD)
—
Not scored
CVSS v4.0 (listed by NVD)
—
Not scored
CVSS (listed by CVE.org)
—
Not scored
EPSS exploit probability
0.2%
Percentile 10.2%
as of 2026-10-24
CISA KEV
—
Not listed

Description

NVD

In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers Commit e576e7843c0d ("ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions") centralized the DAO input mapper clearing logic in dao_clear_input(), but omitted the kfree() calls. It removes the mapper entries from the list and sets their pointers to NULL without freeing the allocated array. This leaks memory each time dao_clear_input() is called. Store the base pointer of the allocation before clearing the mapper entries and free the array after removing entries from the list.

Affected products and packages

CNA (CVE.org)

VendorProductVersions
LinuxLinux
affected: e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 … < f7dc71c1ce885f5d9f128037ebc75d9c0356e060
affected: e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 … < 0919d8dd19f92e12829055c75fced9a454d644bf
affected: e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 … < 593d46fc6af9a0178a46e77d6d24b20d2314165f
default: unaffected
LinuxLinux
affected: 6.14
unaffected: 0 … < 6.14
unaffected: 6.18.57 … <= 6.18.*
unaffected: 7.2.11 … <= 7.2.*
unaffected: 7.3 … <= *
default: affected

Open-source packages (GitHub Advisory / OSV)

ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers

EcosystemPackageAffected versionsFixed in
>= e576e7843c0d65b82d4092e5b386d9fbf5bc10c3, < f7dc71c1ce885f5d9f128037ebc75d9c0356e060; < 0919d8dd19f92e12829055c75fced9a454d644bf; < 593d46fc6af9a0178a46e77d6d24b20d2314165ff7dc71c1ce885f5d9f128037ebc75d9c0356e060, 0919d8dd19f92e12829055c75fced9a454d644bf, 593d46fc6af9a0178a46e77d6d24b20d2314165f
LinuxKernel>= 6.14.0, < 6.18.57; >= 6.19.0, < 7.2.116.18.57, 7.2.11

Linux distribution status

Red Hat ↗ Fetching

Debian ↗

ReleasePackageStatusFixed version / notes
bookwormlinuxnot-affected unimportant
forkylinuxresolved not yet assigned7.2.11-1
sidlinuxresolved not yet assigned7.2.11-1
trixielinuxnot-affected unimportant

Ubuntu ↗ Fetching

References (6)