CVE-2026-68346

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the ALSA hda cs35l41 component, the cs35l41 get acpi mute state() function evaluates a DSM method to retrieve the ACPI mute state. The function fails to free the returned ACPI object, leading to a memory leak of the DSM result object upon every successful query. Additionally, the function assumes the returned object is a buffer containing at least one byte. A malformed firmware response could return an empty buffer or a different object type, causing the ret->buffer.pointer dereference to access an invalid pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.