CVE-2026-99068 is a vulnerability in Linux Kernel
Published on October 23, 2026
ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers
In the Linux kernel, the following vulnerability has been resolved:
ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers
Commit e576e7843c0d ("ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions")
centralized the DAO input mapper clearing logic in
dao_clear_input(), but omitted the kfree() calls.
It removes the mapper entries from the list and sets their pointers
to NULL without freeing the allocated array. This leaks memory each
time dao_clear_input() is called.
Store the base pointer of the allocation before clearing the mapper
entries and free the array after removing entries from the list.
Products Associated with CVE-2026-99068
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 and below f7dc71c1ce885f5d9f128037ebc75d9c0356e060 is affected.
- Version e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 and below 0919d8dd19f92e12829055c75fced9a454d644bf is affected.
- Version e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 and below 593d46fc6af9a0178a46e77d6d24b20d2314165f is affected.
- Version 6.14 is affected.
- Before 6.14 is unaffected.
- Version 6.18.57, <= 6.18.* is unaffected.
- Version 7.2.11, <= 7.2.* is unaffected.
- Version 7.3, <= * is unaffected.