Riskcovery

CVE-2023-52663

ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()

State
Published
Severity
Not scored
Published
May 17, 2024
Updated
May 11, 2026
Reserved
Mar 7, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()

Driver uses kasprintf() to initialize fw_{code,data}_bin members of struct acp_dev_data, but kfree() is never called to deallocate the memory, which results in a memory leak.

Fix the issue by switching to devm_kasprintf(). Additionally, ensure the allocation was successful by checking the pointer validity.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f7da88003c53cf0eedabe609324a047b1921dfcc to before 88028c45d5871dfc449b2b0a27abf6428453a5ecAffected
  • f7da88003c53cf0eedabe609324a047b1921dfcc to before be4760799c6a7c01184467287f0de41e0dd255f8Affected
  • f7da88003c53cf0eedabe609324a047b1921dfcc to before 7296152e58858f928db448826eb7ba5ae611297bAffected
  • f7da88003c53cf0eedabe609324a047b1921dfcc to before 222be59e5eed1554119294edc743ee548c2371d0Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.23 through 6.6.*Not affected
  • 6.7.11 through 6.7.*Not affected
  • 6.8.2 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.