CVE-2026-72263

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: topology: fix memory leak in snd_sof_load_topology When the topology filename contains "dummy" and tplg_cnt is 0, the function returns -EINVAL directly without freeing the tplg_files allocated by kcalloc() at line 2497. This leaks memory on every such topology load attempt. Fix this by setting ret = -EINVAL and jumping to the out: label, which already handles the kfree(tplg_files) cleanup.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linux6ed7787c43ecf4ae27a3e700cab53a1ed646c7f8, d46f9f23897261da53ffbeb89d48a13982ba7d28 or later

Affected products

ProductAffected versionsFixed in
Linux Linux99c159279c6dfa2c4867c7f76875f58263f8f43b ≤ v < 6ed7787c43ecf4ae27a3e700cab53a1ed646c7f8, 99c159279c6dfa2c4867c7f76875f58263f8f43b ≤ v < d46f9f23897261da53ffbeb89d48a13982ba7d28, 6.196ed7787c43ecf4ae27a3e700cab53a1ed646c7f8, d46f9f23897261da53ffbeb89d48a13982ba7d28

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.