---
id: CVE-2026-99068
title: 'ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers'
summary: >-
  In the Linux kernel, the following vulnerability has been resolved:


  ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers


  Commit e576e7843c0d ("ALSA: ctxfi: Simplify dao_clear_{left,right}_input()
  functions")

  centralized the …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 <
    f7dc71c1ce885f5d9f128037ebc75d9c0356e060
  - >-
    Linux >= e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 <
    0919d8dd19f92e12829055c75fced9a454d644bf
  - >-
    Linux >= e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 <
    593d46fc6af9a0178a46e77d6d24b20d2314165f
  - Linux 6.14
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T12:23:11.461Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-99068'
references:
  - url: 'https://git.kernel.org/stable/c/f7dc71c1ce885f5d9f128037ebc75d9c0356e060'
  - url: 'https://git.kernel.org/stable/c/0919d8dd19f92e12829055c75fced9a454d644bf'
  - url: 'https://git.kernel.org/stable/c/593d46fc6af9a0178a46e77d6d24b20d2314165f'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.516Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers

Commit e576e7843c0d ("ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions")
centralized the DAO input mapper clearing logic in
dao_clear_input(), but omitted the kfree() calls.

It removes the mapper entries from the list and sets their pointers
to NULL without freeing the allocated array. This leaks memory each
time dao_clear_input() is called.

Store the base pointer of the allocation before clearing the mapper
entries and free the array after removing entries from the list.

## Affected

- `Linux >= e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 < f7dc71c1ce885f5d9f128037ebc75d9c0356e060`
- `Linux >= e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 < 0919d8dd19f92e12829055c75fced9a454d644bf`
- `Linux >= e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 < 593d46fc6af9a0178a46e77d6d24b20d2314165f`
- `Linux 6.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.