Description
In the Linux kernel, the following vulnerability has been resolved: soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() In svs_enable_debug_write(), the buf allocated by memdup_user_nul() is leaked if kstrtoint() fails. Fix this by using __free(kfree) to automatically free buf, eliminating the need for explicit kfree() calls and preventing leaks. [Angelo: Added missing cleanup.h inclusion]
Affected products
linux: linux kernel
References6
- git.kernel.org/stable/c/06195456c4e4de3826c4ca60eca941c472f991d0 Patch
- git.kernel.org/stable/c/0f6498077faa9cd89bb787bcc57063494a6f0601 Patch
- git.kernel.org/stable/c/47a3e372f7d68776adb749a27c0ec9058ff1b4fd Patch
- git.kernel.org/stable/c/6259094ee806fb813ca95894c65fb80e2ec98bf1 Patch
- git.kernel.org/stable/c/6bb10466e0884b4a68d4a1f3f4bb87eeb471c18a Patch
- git.kernel.org/stable/c/a58c97828911c0b6e25d6b556789da974003efda Patch
Metrics
- CVSS 3.1
-
5.5
MEDIUM
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS — exploit probability
- 0% percentile: 5 · as of 14 November 2026
- CWE
- CWE-401
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.