CVE-2026-23065

MEDIUM

Linux Kernel 6.8-6.12.68, 6.13-6.18.8 - Use-After-Free in wbrf_record()

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix memory leak in wbrf_record() The tmp buffer is allocated using kcalloc() but is not freed if acpi_evaluate_dsm() fails. This causes a memory leak in the error path. Fix this by explicitly freeing the tmp buffer in the error handling path of acpi_evaluate_dsm().

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/1152dffe01af86e42ce2b208b92ef7f8c275d130

Patch

https://git.kernel.org/stable/c/1a0072bd1f1e559eda3e91a24dbc51c9eb025c54

Patch

https://git.kernel.org/stable/c/2bf1877b7094c684e1d652cac6912cfbc507ad3e

Scores

CVSS v3 5.5

EPSS 0.0012

EPSS Percentile 2.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-401

Status published

Products (12)

linux/Kernel 6.13.0 - 6.18.8linux

linux/Kernel 6.8.0 - 6.12.68linux

Linux/Linux < 6.8

Linux/Linux 58e82a62669da52e688f4a8b89922c1839bf1001 - 1152dffe01af86e42ce2b208b92ef7f8c275d130

Linux/Linux 58e82a62669da52e688f4a8b89922c1839bf1001 - 1a0072bd1f1e559eda3e91a24dbc51c9eb025c54

Linux/Linux 58e82a62669da52e688f4a8b89922c1839bf1001 - 2bf1877b7094c684e1d652cac6912cfbc507ad3e

Linux/Linux 6.12.68 - 6.12.*

Linux/Linux 6.18.8 - 6.18.*

Linux/Linux 6.19

Linux/Linux 6.8

... and 2 more

Published Feb 04, 2026

Tracked Since Feb 18, 2026