← CVE Intelligence

CVE-2023-53708

ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects If a badly constructed firmware includes multiple `ACPI_TYPE_PACKAGE` objects while evaluating the AMD LPS0 _DSM, there will be a memory leak. Explicitly guard against this.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 146f1ed852a87b802ed6e71c31e189c64871383c before 7b7964cd9db30bc84808a40d13a0633b4313f149; affected 146f1ed852a87b802ed6e71c31e189c64871383c before 1ea7e47807279369c82718efd2677ea25c6579e3; affected 146f1ed852a87b802ed6e71c31e189c64871383c before 9e8bbde9293151430884aed882a88eaa22298f72; affected 146f1ed852a87b802ed6e71c31e189c64871383c before 883cf0d4cf288313b71146ddebdf5d647b76c78b
Linux / Linuxaffected 5.11; unaffected 0 before 5.11; unaffected 5.15.133 through 5.15.*; unaffected 6.1.55 through 6.1.*; unaffected 6.5.5 through 6.5.*; unaffected 6.6 through *

CWE

No CWE identifiers supplied.

References