CVE-2023-52663: ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()
In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: amd: Fix memory leak in amdsofacpprobe()
Driver uses kasprintf() to initialize fw{code,data}bin members of struct acpdevdata, but kfree() is never called to deallocate the memory, which results in a memory leak.
Fix the issue by switching to devmkasprintf(). Additionally, ensure the allocation was successful by checking the pointer validity.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: amd: Fix memory leak in amdsofacpprobe()
The Linux kernel CVE team has assigned CVE-2023-52663 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051740-CVE-2023-52663-1045@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52663?
CVE-2023-52663 has been classified with a moderate severity due to the memory leak in the Linux kernel's ASoC subsystem.
How do I fix CVE-2023-52663?
To resolve CVE-2023-52663, upgrade to kernel versions 6.6.23, 6.7.11, 6.8.2, 6.9, or appropriate Debian versions like 5.10.223-1 or 6.12.12-1.
Which systems are affected by CVE-2023-52663?
CVE-2023-52663 affects specific versions of the Linux kernel including versions below 6.6.23 and above 6.9.
What components are involved in CVE-2023-52663?
CVE-2023-52663 specifically involves the ASoC subsystem in the Linux kernel and the initialization of struct acp_dev_data.
Is there a workaround for CVE-2023-52663?
There is no known workaround for CVE-2023-52663; the only solution is to upgrade to the patched kernel versions.