GHSA-8467-wmq7-xf7qunknown
In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix memory...
🔗 CVE IDs covered (1)
📋 Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers
Commit e576e7843c0d ("ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions") centralized the DAO input mapper clearing logic in dao_clear_input(), but omitted the kfree() calls.
It removes the mapper entries from the list and sets their pointers to NULL without freeing the allocated array. This leaks memory each time dao_clear_input() is called.
Store the base pointer of the allocation before clearing the mapper entries and free the array after removing entries from the list.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-99068
- https://git.kernel.org/stable/c/0919d8dd19f92e12829055c75fced9a454d644bf
- https://git.kernel.org/stable/c/593d46fc6af9a0178a46e77d6d24b20d2314165f
- https://git.kernel.org/stable/c/f7dc71c1ce885f5d9f128037ebc75d9c0356e060
- https://github.com/advisories/GHSA-8467-wmq7-xf7q