{"schema":"threatline.record/2","record":{"id":"CVE-2026-99068","aliases":[],"summary":"ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ctxfi: Fix memory leakage when clearing DAO input mappers\n\nCommit e576e7843c0d (\"ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions\")\ncentralized the DAO input mapper clearing logic in\ndao_clear_input(), but omitted the kfree() calls.\n\nIt removes the mapper entries from the list and sets their pointers\nto NULL without freeing the allocated array. This leaks memory each\ntime dao_clear_input() is called.\n\nStore the base pointer of the allocation before clearing the mapper\nentries and free the array after removing entries from the list.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-99068","source_modified_at":"2026-10-23T12:23:11.461Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"version":"e576e7843c0d65b82d4092e5b386d9fbf5bc10c3","lessThan":"f7dc71c1ce885f5d9f128037ebc75d9c0356e060","status":"affected","versionType":"git"},{"version":"e576e7843c0d65b82d4092e5b386d9fbf5bc10c3","lessThan":"0919d8dd19f92e12829055c75fced9a454d644bf","status":"affected","versionType":"git"},{"version":"e576e7843c0d65b82d4092e5b386d9fbf5bc10c3","lessThan":"593d46fc6af9a0178a46e77d6d24b20d2314165f","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-99068","source_modified_at":"2026-10-23T12:23:11.461Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"version":"6.14","status":"affected"},{"version":"0","lessThan":"6.14","status":"unaffected","versionType":"semver"},{"version":"6.18.57","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.11","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-99068","source_modified_at":"2026-10-23T12:23:11.461Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"0919d8dd19f92e12829055c75fced9a454d644bf","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-99068","source_modified_at":"2026-10-23T12:23:11.461Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"593d46fc6af9a0178a46e77d6d24b20d2314165f","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-23T12:23:11.461Z","modified_at":"2026-10-23T12:23:11.461Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-99068","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T12:23:11.461Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/f7dc71c1ce885f5d9f128037ebc75d9c0356e060"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/0919d8dd19f92e12829055c75fced9a454d644bf"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/593d46fc6af9a0178a46e77d6d24b20d2314165f"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-23T12:23:11.461Z","content_hash":"6fa5a105ee901d9f01d8000b331504f5821bc808c094bb19a603f0f2dc73d2ca"}}