CVE-2026-72263 in Linux
Summary
by MITRE • 08/15/2026
In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: topology: fix memory leak in snd_sof_load_topology
When the topology filename contains "dummy" and tplg_cnt is 0, the function returns -EINVAL directly without freeing the tplg_files allocated by kcalloc() at line 2497. This leaks memory on every such topology load attempt.
Fix this by setting ret = -EINVAL and jumping to the out: label, which already handles the kfree(tplg_files) cleanup.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 08/15/2026
The vulnerability resides within the Linux kernel's sound subsystem specifically in the SOF (Sound Open Firmware) topology loading mechanism. This memory leak occurs during the execution of the snd_sof_load_topology function when processing topology files that contain the string "dummy" in their filenames while maintaining a tplg_cnt value of zero. The flaw represents a classic resource management error where allocated memory is not properly released upon early function termination.
The technical implementation issue stems from the conditional logic flow within the topology loading process. When the specified conditions are met, the function immediately returns -EINVAL without executing the standard cleanup routine that would normally free the tplg_files memory allocation. This kcalloc() allocation occurs at line 2497 and creates a persistent memory leak for each failed topology load attempt. The vulnerability demonstrates poor defensive programming practices where error handling paths do not account for resource cleanup operations.
The operational impact of this memory leak can accumulate over time, particularly in systems that frequently attempt to load topology files with the "dummy" string pattern or when multiple failed load attempts occur sequentially. Each instance results in a memory allocation that remains unreleased until the kernel process terminates, potentially leading to gradual memory exhaustion and degraded system performance. The vulnerability affects any system utilizing SOF-based audio drivers that process topology files through the snd_sof_load_topology function.
The fix implements a proper error handling pattern by setting the return value to -EINVAL and then jumping to the existing out: label that already contains the necessary cleanup code including kfree(tplg_files). This approach follows established kernel development practices for resource management and aligns with CWE-401 which addresses improper resource release or cleanup. The solution ensures that all allocated memory is properly freed regardless of the execution path taken by the function, maintaining system stability and preventing memory accumulation during error conditions.
This vulnerability classification maps to ATT&CK technique T1490 which covers data destruction and resource exhaustion through memory leaks. The fix demonstrates proper adherence to kernel security guidelines and represents a standard defensive programming approach that prevents resource leakage in error conditions. The solution maintains backward compatibility while ensuring robust memory management throughout the topology loading process, aligning with industry best practices for secure kernel development as outlined in various security frameworks and standards.