CVE-2026-64485

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ALSA compress component where the snd compr task new() function allocates a driver task before validating DMA buffers and reserving file descriptors. If these subsequent steps fail, the system frees the task wrapper and DMA-buffer references without invoking the task free() callback, leading to a leak of driver resources allocated by task create(). Additionally, the dual-fd allocation path fails to store negative results from get unused fd flags() in the retval variable. Because retval retains the success value from task create(), the system may incorrectly report a successful TASK CREATE operation even when the task was discarded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.