CVE-2026-72263

Updated on 15 Aug 2026

Severity

Awaiting Analysis

Details

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: topology: fix memory leak in snd_sof_load_topology

When the topology filename contains “dummy” and tplg_cnt is 0, the function returns -EINVAL directly without freeing the tplg_files allocated by kcalloc() at line 2497. This leaks memory on every such topology load attempt.

Fix this by setting ret = -EINVAL and jumping to the out: label, which already handles the kfree(tplg_files) cleanup.

Details

Affected packages:
kernel @ 5.14.0 (+2 more)

Fixes