< Back

CVE-2026-72263

Updated on 15 Aug 2026

Severity

3.3 Low severity

Details

CVSS score
3.3
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: topology: fix memory leak in snd_sof_load_topology

When the topology filename contains “dummy” and tplg_cnt is 0, the function returns -EINVAL directly without freeing the tplg_files allocated by kcalloc() at line 2497. This leaks memory on every such topology load attempt.

Fix this by setting ret = -EINVAL and jumping to the out: label, which already handles the kfree(tplg_files) cleanup.

Details

Affected product:
AlmaLinux 9.2 ESU , Debian 10 ELS , TuxCare 9.6 ESU , TuxCare 9.8 ESU
Affected packages:
linux @ 4.19.0 (+3 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Ubuntu 26.04 Released
2 kernels
  • 7.0.0-31.31
  • 7.0.0-34.34