Memory Leak Vulnerability in Linux Kernel Affecting ARM64

CVE-2023-53266

What is CVE-2023-53266?

A memory leak vulnerability exists in the Linux kernel for ARM64 architectures, which could potentially allow for the accumulation of unreleased memory resources. This occurs when checks for the SMCCC version and conduit fail, leading to a situation where allocated 'ffh_ctxt' memory is not freed if an error condition is triggered. This issue is resolved by ensuring that memory allocation is performed only after these checks, thus preventing leaks and ensuring better resource management.

References