{"id":"CVE-2026-99068","title":"ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ctxfi: Fix memory leakage when clearing DAO input mappers\n\nCommit e576e7843c0d (\"ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions\")\ncentralized the …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 < f7dc71c1ce885f5d9f128037ebc75d9c0356e060","Linux >= e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 < 0919d8dd19f92e12829055c75fced9a454d644bf","Linux >= e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 < 593d46fc6af9a0178a46e77d6d24b20d2314165f","Linux 6.14"],"published":"2026-10-23","updated":"2026-10-23","sourceUpdated":"2026-10-23T12:23:11.461Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99068","references":[{"url":"https://git.kernel.org/stable/c/f7dc71c1ce885f5d9f128037ebc75d9c0356e060"},{"url":"https://git.kernel.org/stable/c/0919d8dd19f92e12829055c75fced9a454d644bf"},{"url":"https://git.kernel.org/stable/c/593d46fc6af9a0178a46e77d6d24b20d2314165f"}],"tags":["cve.org"],"ingestedAt":"2026-10-23T13:24:55.516Z","slug":"CVE-2026-99068","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ctxfi: Fix memory leakage when clearing DAO input mappers\n\nCommit e576e7843c0d (\"ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions\")\ncentralized the DAO input mapper clearing logic in\ndao_clear_input(), but omitted the kfree() calls.\n\nIt removes the mapper entries from the list and sets their pointers\nto NULL without freeing the allocated array. This leaks memory each\ntime dao_clear_input() is called.\n\nStore the base pointer of the allocation before clearing the mapper\nentries and free the array after removing entries from the list.\n\n## Affected\n\n- `Linux >= e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 < f7dc71c1ce885f5d9f128037ebc75d9c0356e060`\n- `Linux >= e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 < 0919d8dd19f92e12829055c75fced9a454d644bf`\n- `Linux >= e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 < 593d46fc6af9a0178a46e77d6d24b20d2314165f`\n- `Linux 6.14`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}