CVE-2026-64485

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ALSA: compress: Fix task creation error unwind<br /> <br /> snd_compr_task_new() allocates the driver task before validating the<br /> returned DMA buffers and reserving file descriptors. When either of<br /> those later steps fails, the core frees its task wrapper and DMA-buffer<br /> references without calling the driver&amp;#39;s task_free() callback. Any<br /> driver resources allocated by task_create() are therefore leaked.<br /> <br /> The dual-fd allocation path also jumps to cleanup without storing the<br /> negative get_unused_fd_flags() result in retval. Since retval still<br /> contains the successful task_create() return value, TASK_CREATE can<br /> incorrectly report success although the task was discarded.<br /> <br /> Preserve the fd allocation errors and call task_free() when failure<br /> occurs after a successful task_create() callback.