Memory Leakage Vulnerability in Linux Kernel's ALSA Product by Linux

CVE-2026-99068

What is CVE-2026-99068?

A memory leakage vulnerability has been identified in the ALSA component of the Linux kernel due to improper handling of input mappers in the dao_clear_input() function. When clearing the DAO input mappers, the logic centralized by a recent commit fails to free the allocated memory, leading to memory leaks each time the clearing function is invoked. The correct implementation involves storing the base pointer of the allocated memory before clearing the mappers and ensuring that the memory is properly deallocated afterwards. Addressing this issue is crucial to maintaining system performance and stability.

References