CVE-2026-23065

high

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix memory leak in wbrf_record() The tmp buffer is allocated using kcalloc() but is not freed if acpi_evaluate_dsm() fails. This causes a memory leak in the error path. Fix this by explicitly freeing the tmp buffer in the error handling path of acpi_evaluate_dsm().

References

https://git.kernel.org/stable/c/2bf1877b7094c684e1d652cac6912cfbc507ad3e

https://git.kernel.org/stable/c/1a0072bd1f1e559eda3e91a24dbc51c9eb025c54

https://git.kernel.org/stable/c/1152dffe01af86e42ce2b208b92ef7f8c275d130

Details

Source: Mitre, NVD

Published: 2026-02-04

Updated: 2026-02-05

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00017