Linux Kernel ALSA ctxfi: Memory Leak in DAO Input Mapper Clearing
CVE-2026-99068 Published on October 23, 2026

ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers
In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers Commit e576e7843c0d ("ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions") centralized the DAO input mapper clearing logic in dao_clear_input(), but omitted the kfree() calls. It removes the mapper entries from the list and sets their pointers to NULL without freeing the allocated array. This leaks memory each time dao_clear_input() is called. Store the base pointer of the allocation before clearing the mapper entries and free the array after removing entries from the list.

NVD

Products Associated with CVE-2026-99068

stack.watch emails you whenever new vulnerabilities are published in Linux Kernel or Canonical Ubuntu Linux. Just hit a watch button to start following.

Linux Kernel

  Watch

Canonical Ubuntu Linux

  Watch

Affected Versions

• Version e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 and below f7dc71c1ce885f5d9f128037ebc75d9c0356e060 is affected.
• Version e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 and below 0919d8dd19f92e12829055c75fced9a454d644bf is affected.
• Version e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 and below 593d46fc6af9a0178a46e77d6d24b20d2314165f is affected.

• Version 6.14 is affected.
• Before 6.14 is unaffected.
• Version 6.18.57, <= 6.18.* is unaffected.
• Version 7.2.11, <= 7.2.* is unaffected.
• Version 7.3, <= * is unaffected.

Exploit Probability