Answer in brief
CVE-2026-99068 records a Unknown severity vulnerability in ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 <f7dc71c1ce885f5d9f128037ebc75d9c0356e060 || >=e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 <0919d8dd19f92e12829055c75fced9a454d644bf || >=e576e7843c0d65b82d4092e5b386d9fbf5bc10c3 <593d46fc6af9a0178a46e77d6d24b20d2314165f | f7dc71c1ce885f5d9f128037ebc75d9c0356e060, 0919d8dd19f92e12829055c75fced9a454d644bf, 593d46fc6af9a0178a46e77d6d24b20d2314165f |
| Linux/Linuxgeneric | 6.14 | Not reported |
Published upstream
Oct 23, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 23, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 23, 2026
In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers Commit e576e7843c0d ("ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions") centralized the DAO input mapper clearing logic in dao_clear_input(), but omitted the kfree() calls. It removes the mapper entries from the list and sets their pointers to NULL without freeing the allocated array. This leaks memory each time dao_clear_input() is called. Store the base pointer of the allocation before clearing the mapper entries and free the array after removing entries from the list.
Quoted source text, attributed separately from HOL analysis.