CVE-2026-72263

CVE-2026-72263

published August 15, 2026

CVSS
—
EPSS
0%
Percentile
9.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: topology: fix memory leak in snd_sof_load_topology

When the topology filename contains "dummy" and tplg_cnt is 0, the

function returns -EINVAL directly without freeing the tplg_files

allocated by kcalloc() at line 2497. This leaks memory on every

such topology load attempt.

Fix this by setting ret = -EINVAL and jumping to the out: label,

which already handles the kfree(tplg_files) cleanup.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.0th percentile
Published
2026-08-15T10:21Z
References (2)
EPSS history
Timeline
  • 15 AUG 05:54Z
    ASoC: SOF: topology: fix memory leak in snd_sof_load_topology
    cvelistv5