CVE-2023-52663

Driver uses kasprintf() to initialize fw{code,data}bin members of struct acpdevdata, but kfree() is never called to deallocate the memory, which results in a memory leak.

Fix the issue by switching to devm_kasprintf(). Additionally, ensure the allocation was successful by checking the pointer validity.

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52663.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

f7da88003c53cf0eedabe609324a047b1921dfcc

Fixed

88028c45d5871dfc449b2b0a27abf6428453a5ec

Fixed

be4760799c6a7c01184467287f0de41e0dd255f8

Fixed

7296152e58858f928db448826eb7ba5ae611297b

Fixed

222be59e5eed1554119294edc743ee548c2371d0

Affected versions

v6.*

v6.5

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.15

v6.6.16

v6.6.17

v6.6.18

v6.6.19

v6.6.2

v6.6.20

v6.6.21

v6.6.22

v6.6.3

v6.6.4

v6.6.5

v6.6.6

v6.6.7

v6.6.8

v6.6.9

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.7.1

v6.7.10

v6.7.2

v6.7.3

v6.7.4

v6.7.5

v6.7.6

v6.7.7

v6.7.8

v6.7.9

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.8.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52663.json"

vanir_signatures

[
    {
        "id": "CVE-2023-52663-06b29542",
        "target": {
            "function": "amd_sof_acp_probe",
            "file": "sound/soc/sof/amd/acp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88028c45d5871dfc449b2b0a27abf6428453a5ec",
        "digest": {
            "function_hash": "3132237898651052614698648975986057517",
            "length": 2645.0
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2023-52663-4cde59a1",
        "target": {
            "file": "sound/soc/sof/amd/acp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@222be59e5eed1554119294edc743ee548c2371d0",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "122010490128430218871311424082529941938",
                "100365473514337995530404028140531424450",
                "83323953444929647100414374481040179626",
                "337114556257997760107176342468394458003",
                "76740813113415819322892949859382073282",
                "306728695663459992236627719433940921440",
                "95272596724148371117075210533533883339",
                "245901631737622555912109283751525431673",
                "124367837180902829691193991537014922195",
                "59120535991401150471796502788662060823",
                "231693897432122025133126558210395223727",
                "326454970516712955748173170479470711652",
                "51093966578022291864499075124604244444"
            ]
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2023-52663-67da23d9",
        "target": {
            "function": "amd_sof_acp_probe",
            "file": "sound/soc/sof/amd/acp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be4760799c6a7c01184467287f0de41e0dd255f8",
        "digest": {
            "function_hash": "3132237898651052614698648975986057517",
            "length": 2645.0
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2023-52663-6d9ca62e",
        "target": {
            "function": "amd_sof_acp_probe",
            "file": "sound/soc/sof/amd/acp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7296152e58858f928db448826eb7ba5ae611297b",
        "digest": {
            "function_hash": "3132237898651052614698648975986057517",
            "length": 2645.0
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2023-52663-82a5795f",
        "target": {
            "function": "amd_sof_acp_probe",
            "file": "sound/soc/sof/amd/acp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@222be59e5eed1554119294edc743ee548c2371d0",
        "digest": {
            "function_hash": "3132237898651052614698648975986057517",
            "length": 2645.0
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2023-52663-9045626d",
        "target": {
            "file": "sound/soc/sof/amd/acp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be4760799c6a7c01184467287f0de41e0dd255f8",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "122010490128430218871311424082529941938",
                "100365473514337995530404028140531424450",
                "83323953444929647100414374481040179626",
                "337114556257997760107176342468394458003",
                "76740813113415819322892949859382073282",
                "306728695663459992236627719433940921440",
                "95272596724148371117075210533533883339",
                "245901631737622555912109283751525431673",
                "124367837180902829691193991537014922195",
                "59120535991401150471796502788662060823",
                "231693897432122025133126558210395223727",
                "326454970516712955748173170479470711652",
                "51093966578022291864499075124604244444"
            ]
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2023-52663-93b8ebf6",
        "target": {
            "file": "sound/soc/sof/amd/acp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7296152e58858f928db448826eb7ba5ae611297b",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "122010490128430218871311424082529941938",
                "100365473514337995530404028140531424450",
                "83323953444929647100414374481040179626",
                "337114556257997760107176342468394458003",
                "76740813113415819322892949859382073282",
                "306728695663459992236627719433940921440",
                "95272596724148371117075210533533883339",
                "245901631737622555912109283751525431673",
                "124367837180902829691193991537014922195",
                "59120535991401150471796502788662060823",
                "231693897432122025133126558210395223727",
                "326454970516712955748173170479470711652",
                "51093966578022291864499075124604244444"
            ]
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2023-52663-a4f4745b",
        "target": {
            "file": "sound/soc/sof/amd/acp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88028c45d5871dfc449b2b0a27abf6428453a5ec",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "122010490128430218871311424082529941938",
                "100365473514337995530404028140531424450",
                "83323953444929647100414374481040179626",
                "337114556257997760107176342468394458003",
                "76740813113415819322892949859382073282",
                "306728695663459992236627719433940921440",
                "95272596724148371117075210533533883339",
                "245901631737622555912109283751525431673",
                "124367837180902829691193991537014922195",
                "59120535991401150471796502788662060823",
                "231693897432122025133126558210395223727",
                "326454970516712955748173170479470711652",
                "51093966578022291864499075124604244444"
            ]
        },
        "signature_type": "Line"
    }
]

Git / github.com/gregkh/linux