Riskcovery

CVE-2023-53266

arm64: acpi: Fix possible memory leak of ffh_ctxt

State
Published
Severity
5.5 Medium
Published
Sep 16, 2025
Updated
May 11, 2026
Reserved
Sep 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

arm64: acpi: Fix possible memory leak of ffh_ctxt

Allocated 'ffh_ctxt' memory leak is possible if the SMCCC version and conduit checks fail and -EOPNOTSUPP is returned without freeing the allocated memory.

Fix the same by moving the allocation after the SMCCC version and conduit checks.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 1d280ce099db396e092cac1aa9bf2ea8beee6d76 to before 7521da2eb42d65f89f511b7912d3757cf3d9168aAffected
  • 1d280ce099db396e092cac1aa9bf2ea8beee6d76 to before 1b561d3949f8478c5403c9752b5533211a757226Affected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.2.3 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.