CVE-2026-53065: ASoC: sti: use managed regmap_field allocations
In the Linux kernel, the following vulnerability has been resolved:
ASoC: sti: use managed regmapfield allocations
The regmapfield objects allocated at player init are never freed and may leak resources if the driver is removed.
Switch to devmregmapfieldalloc() to automatically limit the lifetime of the allocations the lifetime of the device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Change the ASoC sti driver to allocate regmap_field objects using devm_regmap_field_alloc() so allocations are automatically limited to the device lifetime and freed when the driver/device is removed.
Linux kernel ASoC (ASoC: sti driver) devm_regmap_field_alloc() allocation = Use devm_regmap_field_alloc() instead of non-devm regmap_field allocation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53065?
The severity of CVE-2026-53065 is rated at 6 on the CVSS scale.
What causes CVE-2026-53065?
CVE-2026-53065 is caused by the failure to free regmap_field objects allocated during player initialization, leading to potential resource leaks.
How do I fix CVE-2026-53065?
To fix CVE-2026-53065, switch to using devm_regmap_field_alloc() to ensure proper management and disposal of regmap_field allocations.
Which software versions are affected by CVE-2026-53065?
CVE-2026-53065 affects versions of the Linux kernel that include the ASoC (Audio System on Chip) driver for sti.
Is CVE-2026-53065 a serious vulnerability?
While CVE-2026-53065 has a moderate severity rating, it poses a risk of resource leaks which could impact system stability if the driver is removed.