In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers Commit e576e7843c0d ("ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions") centralized the DAO input mapper clearing logic in dao_clear_input(), but omitted the kfree() calls. It removes the mapper entries from the list and sets their pointers to NULL without freeing the allocated array. This leaks memory each time dao_clear_input() is called. Store the base pointer of the allocation before clearing the mapper entries and free the array after removing entries from the list.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix memory leakage when     clearing DAO input mappers Commit e576e7843c0d (ALSA: ctxfi: Simplify dao_clear_{left,right}_input()     functions) centralized the DAO input mapper clearing logic in dao_clear_input(), but omitted the kfree()     calls. It removes the mapper entries from the list and sets their pointers to NULL without freeing the     allocated array. This leaks memory each time dao_clear_input() is called. Store the base pointer of the     allocation before clearing the mapper entries and free the array after removing entries from the list.
    (CVE-2026-99068)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
381194	openSUSE 16: cluster-md-kmp-nvidia64kb / dlm-kmp-nvidia64kb / etc (openSUSE-SU-2026:22307-1)	Nessus	SuSE Local Security Checks	Local	high
372161	Linux Distros Unpatched Vulnerability : CVE-2026-99068	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-99068

medium

Tenable Plugins

high

medium