CVE-2026-23065

medium

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix memory leak in wbrf_record() The tmp buffer is allocated using kcalloc() but is not freed if acpi_evaluate_dsm() fails. This causes a memory leak in the error path. Fix this by explicitly freeing the tmp buffer in the error handling path of acpi_evaluate_dsm().

References

https://git.kernel.org/stable/c/2bf1877b7094c684e1d652cac6912cfbc507ad3e

https://git.kernel.org/stable/c/1a0072bd1f1e559eda3e91a24dbc51c9eb025c54

https://git.kernel.org/stable/c/1152dffe01af86e42ce2b208b92ef7f8c275d130

Details

Source: Mitre, NVD

Published: 2026-02-04

Updated: 2026-02-05

Risk Information

CVSS v2

Base Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00017