What’s Vulnerable › Vulnerabilities

CVE-2026-72263: ASoC: SOF: topology: fix memory leak in snd_sof_load_topology

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: topology: fix memory leak in snd_sof_load_topology When the topology filename contains "dummy" and tplg_cnt is 0, the function returns -EINVAL directly without freeing the tplg_files allocated by kcalloc() at line 2497. This leaks memory on every such topology load attempt. Fix this by setting ret = -EINVAL and jumping to the out: label, which already handles the kfree(tplg_files) cleanup.

Affected products

• Linux kernel: 6.19 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/6ed7787c43ecf4ae27a3e700cab53a1ed646c7f8
• https://git.kernel.org/stable/c/d46f9f23897261da53ffbeb89d48a13982ba7d28

Get alerted when CVE-2026-72263 or the next vulnerability affects your stack