An issue exists where the audio buffer backing a mapping could be freed upon closing the device while the mapping remains valid. This allows the freed memory to be reused elsewhere while remaining accessible through a stale mapping. Because the `/dev/dsp` device nodes are world-accessible by default, an unprivileged local user can read and write kernel memory. This can lead to privilege escalation, potentially granting full control of the system, or cause a kernel crash resulting in a Denial of Service (DoS).