In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers Commit… (CVE-2026-99068)

The Linux kernel ALSA ctxfi component had a memory leak vulnerability (CVE-2026-99068) due to the omission of kfree() calls in the centralized dao_clear_input() function. This function removes DAO input mapper entries from a list and nullifies their pointers but failed to free the allocated memory array, causing memory leakage each time the function was invoked. The fix involved storing the base pointer of the allocation before clearing the mapper entries and freeing the array after removal.

This vulnerability causes a memory leak in the kernel ALSA ctxfi component, which could lead to increased memory consumption over time. There is no indication of direct exploitation or further impact such as code execution or privilege escalation.

A fix has been implemented in the Linux kernel to properly free allocated memory when clearing DAO input mappers. Users should update to the patched kernel version containing commit e576e7843c0d or later to remediate this issue.