CVE-2026-23065: platform/x86/amd: Fix memory leak in wbrf_record()
In the Linux kernel, the following vulnerability has been resolved:
platform/x86/amd: Fix memory leak in wbrfrecord()
The tmp buffer is allocated using kcalloc() but is not freed if acpievaluatedsm() fails. This causes a memory leak in the error path.
Fix this by explicitly freeing the tmp buffer in the error handling path of acpievaluatedsm().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In platform/x86/amd wbrf_record(), explicitly free the tmp buffer in the error-handling path when acpi_evaluate_dsm() fails.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23065?
CVE-2026-23065 has been classified as a moderate severity vulnerability due to the potential for a memory leak.
How do I fix CVE-2026-23065?
To fix CVE-2026-23065, ensure that you apply the appropriate patches provided in the Linux kernel updates.
What systems are affected by CVE-2026-23065?
CVE-2026-23065 affects the Linux kernel, particularly on platforms using x86 architecture.
What is the impact of CVE-2026-23065?
The impact of CVE-2026-23065 is a memory leak that may lead to increased resource usage, potentially degrading system performance.
Is CVE-2026-23065 being actively exploited?
As of the latest information available, there have been no public reports indicating active exploitation of CVE-2026-23065.