CVE-2026-64485— Linux kernel 安全漏洞

ALSA: compress: Fix task creation error unwind

In the Linux kernel, the following vulnerability has been resolved: ALSA: compress: Fix task creation error unwind snd_compr_task_new() allocates the driver task before validating the returned DMA buffers and reserving file descriptors. When either of those later steps fails, the core frees its task wrapper and DMA-buffer references without calling the driver's task_free() callback. Any driver resources allocated by task_create() are therefore leaked. The dual-fd allocation path also jumps to cleanup without storing the negative get_unused_fd_flags() result in retval. Since retval still contains the successful task_create() return value, TASK_CREATE can incorrectly report success although the task was discarded. Preserve the fd allocation errors and call task_free() when failure occurs after a successful task_create() callback.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

N/A

Linux kernel 安全漏洞

Linux kernel是美国Linux基金会开源的一款操作系统内核。 Linux kernel 6.13版本存在安全漏洞，该漏洞源于ALSA compress驱动snd_compr_task_new()函数在分配驱动任务后未正确验证返回的DMA缓冲区并保留文件描述符，当后续步骤失败时未调用task_free()导致资源泄漏，同时文件描述符分配错误未正确保存，可能错误报告任务创建成功。

N/A

N/A