CVE-2026-23065

MEDIUM

Linux kernel - Memory Corruption

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix memory leak in wbrf_record() The tmp buffer is allocated using kcalloc() but is not freed if acpi_evaluate_dsm() fails. This causes a memory leak in the error path. Fix this by explicitly freeing the tmp buffer in the error handling path of acpi_evaluate_dsm().

Scores

CVSS v3 5.5
EPSS 0.0002
EPSS Percentile 4.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-401
Status published
Products (4)
linux/Kernel 6.13.0 - 6.18.8linux
linux/Kernel 6.8.0 - 6.12.68linux
linux/linux_kernel 6.19 rc1 (6 CPE variants)
linux/linux_kernel 6.8 - 6.12.68
Published Feb 04, 2026
Tracked Since Feb 18, 2026