CVE-2026-68346

A flaw was found in the ALSA cs35l41 driver within the Linux kernel. The cs35l41_get_acpi_mute_state() function fails to properly free an ACPI object after use, leading to a memory leak with each successful query. Additionally, the driver does not validate the returned ACPI object, allowing a malformed firmware response to cause an invalid pointer dereference. This could lead to system instability or a denial of service.

This issue affects systems with Cirrus Logic cs35l41 speakers on HDA ACPI platforms. The ACPI _DSM mute-state query leaks the returned object on each call and does not validate buffer type/size before dereferencing. Systems without cs35l41 codec hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.