CVE-2023-52663

Source
https://nvd.nist.gov/vuln/detail/CVE-2023-52663
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52663.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-52663
Downstream
Related
Published
2024-05-17T13:41:05.630Z
Modified
2025-11-29T20:55:46.631050Z
Summary
ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()
Details

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: amd: Fix memory leak in amdsofacp_probe()

Driver uses kasprintf() to initialize fw{code,data}bin members of struct acpdevdata, but kfree() is never called to deallocate the memory, which results in a memory leak.

Fix the issue by switching to devm_kasprintf(). Additionally, ensure the allocation was successful by checking the pointer validity.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52663.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f7da88003c53cf0eedabe609324a047b1921dfcc
Fixed
88028c45d5871dfc449b2b0a27abf6428453a5ec
Fixed
be4760799c6a7c01184467287f0de41e0dd255f8
Fixed
7296152e58858f928db448826eb7ba5ae611297b
Fixed
222be59e5eed1554119294edc743ee548c2371d0

Affected versions

v6.*

v6.5
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.3
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.7.1
v6.7.10
v6.7.2
v6.7.3
v6.7.4
v6.7.5
v6.7.6
v6.7.7
v6.7.8
v6.7.9
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52663.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.6.0
Fixed
6.6.23
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.11
Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.8.2

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52663.json"