Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() In svs_enable_debug_write(), the buf allocated by memdup_user_nul() is leaked if kstrtoint() fails. Fix this by using __free(kfree) to automatically free buf, eliminating the need for explicit kfree() calls and preventing leaks. [Angelo: Added missing cleanup.h inclusion]
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 13f1bbcfb5822fcaacfc652017b57b79ffcacefa before 47a3e372f7d68776adb749a27c0ec9058ff1b4fd; affected 13f1bbcfb5822fcaacfc652017b57b79ffcacefa before 06195456c4e4de3826c4ca60eca941c472f991d0; affected 13f1bbcfb5822fcaacfc652017b57b79ffcacefa before a58c97828911c0b6e25d6b556789da974003efda; affected 13f1bbcfb5822fcaacfc652017b57b79ffcacefa before 0f6498077faa9cd89bb787bcc57063494a6f0601; affected 13f1bbcfb5822fcaacfc652017b57b79ffcacefa before 6bb10466e0884b4a68d4a1f3f4bb87eeb471c18a; affected 13f1bbcfb5822fcaacfc652017b57b79ffcacefa before 6259094ee806fb813ca95894c65fb80e2ec98bf1 |
| Linux / Linux | affected 6.0; unaffected 0 before 6.0; unaffected 6.1.165 through 6.1.*; unaffected 6.6.128 through 6.6.*; unaffected 6.12.75 through 6.12.*; unaffected 6.18.14 through 6.18.*; unaffected 6.19.4 through 6.19.*; unaffected 7.0 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/47a3e372f7d68776adb749a27c0ec9058ff1b4fd
- https://git.kernel.org/stable/c/06195456c4e4de3826c4ca60eca941c472f991d0
- https://git.kernel.org/stable/c/a58c97828911c0b6e25d6b556789da974003efda
- https://git.kernel.org/stable/c/0f6498077faa9cd89bb787bcc57063494a6f0601
- https://git.kernel.org/stable/c/6bb10466e0884b4a68d4a1f3f4bb87eeb471c18a
- https://git.kernel.org/stable/c/6259094ee806fb813ca95894c65fb80e2ec98bf1