PT-2026-6135 · Linux+2 · Linux Kernel+2

Published

2026-01-01

·

Updated

2026-06-04

·

CVE-2026-23065

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak exists in the wbrf record() function within the platform/x86/amd component of the Linux kernel. The issue occurs because a temporary buffer, allocated using kcalloc(), is not freed when the acpi evaluate dsm() function fails. This results in a memory leak during error handling. The fix involves explicitly freeing the temporary buffer in the error handling path of the acpi evaluate dsm() function.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-23065
OPENSUSE-SU-2026:20416-1
SUSE-SU-2026:0962-1
SUSE-SU-2026:1081-1
SUSE-SU-2026:20838-1
SUSE-SU-2026:20931-1
SUSE-SU-2026:21284-1
USN-8278-1
USN-8278-2
USN-8289-1
USN-8289-2
USN-8296-1
USN-8296-2
USN-8393-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu