CVE-2026-64485ALSA: compress: Fix task creation error unwind
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ALSA: compress: Fix task creation error unwind snd_compr_task_new() allocates the driver task before validating the returned DMA buffers and reserving file descriptors. When either of those later steps fails, the core frees its task wrapper and DMA-buffer references without calling the driver's task_free() callback. Any driver resources allocated by task_create() are therefore leaked. The dual-fd allocation path also jumps to cleanup without storing the negative get_unused_fd_flags() result in retval. Since retval still contains the successful task_create() return value, TASK_CREATE can incorrectly report success although the task was discarded. Preserve the fd allocation errors and call task_free() when failure occurs after a successful task_create() callback.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 04177158cf98a79744937893b100020d77e6f9ac before b27a75d42044d9d4709095617730b91b1c4af423; 04177158cf98a79744937893b100020d77e6f9ac builds before 426a9947a38d272d0e19c031658da68e31128667; 04177158cf98a79744937893b100020d77e6f9ac builds before 4a60127debb9e370d6c0e22a307326b624a141f3 | CNA record |
References
- https://git.kernel.org/stable/c/b27a75d42044d9d4709095617730b91b1c4af423
- https://git.kernel.org/stable/c/426a9947a38d272d0e19c031658da68e31128667
- https://git.kernel.org/stable/c/4a60127debb9e370d6c0e22a307326b624a141f3
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.