CVE-2023-53261
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
15/09/2025
Last modified:
15/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
coresight: Fix memory leak in acpi_buffer->pointer<br />
<br />
There are memory leaks reported by kmemleak:<br />
...<br />
unreferenced object 0xffff00213c141000 (size 1024):<br />
comm "systemd-udevd", pid 2123, jiffies 4294909467 (age 6062.160s)<br />
hex dump (first 32 bytes):<br />
04 00 00 00 02 00 00 00 18 10 14 3c 21 00 ff ff ...........] __kmem_cache_alloc_node+0x2f8/0x348<br />
[] __kmalloc+0x58/0x108<br />
[] acpi_os_allocate+0x2c/0x68<br />
[] acpi_ut_initialize_buffer+0x54/0xe0<br />
[] acpi_evaluate_object+0x388/0x438<br />
[] acpi_evaluate_object_typed+0xe8/0x240<br />
[] coresight_get_platform_data+0x1b4/0x988 [coresight]<br />
...<br />
<br />
The ACPI buffer memory (buf.pointer) should be freed. But the buffer<br />
is also used after returning from acpi_get_dsd_graph().<br />
Move the temporary variables buf to acpi_coresight_parse_graph(),<br />
and free it before the function return to prevent memory leak.



