CVE-2023-52663

ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()

published May 17, 2024

CVSS
—
EPSS
0%
Percentile
12.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()

Driver uses kasprintf() to initialize fw_{code,data}_bin members of

struct acp_dev_data, but kfree() is never called to deallocate the

memory, which results in a memory leak.

Fix the issue by switching to devm_kasprintf(). Additionally, ensure the

allocation was successful by checking the pointer validity.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00224 · 12.3th percentile
Published
2024-05-17T13:41Z
EPSS history
Timeline
  • 17 MAY 13:41Z
    ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()
    cvelistv5