CVE-2026-64485

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture (ALSA) compress module. The snd_compr_task_new() function, responsible for creating driver tasks, does not properly handle errors during the validation of Direct Memory Access (DMA) buffers or file descriptor reservation. This oversight can lead to a resource leak, where driver resources allocated during task creation are not freed. Consequently, this could result in system instability or a Denial of Service (DoS) over time due to resource exhaustion.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.