CVE-2026-45881 PUBLISHED

soc: mediatek: svs: Fix memory leak in svs_enable_debug_write()

Assigner: Linux
Reserved: 13.05.2026 Published: 27.05.2026 Updated: 27.05.2026

In the Linux kernel, the following vulnerability has been resolved:

soc: mediatek: svs: Fix memory leak in svs_enable_debug_write()

In svs_enable_debug_write(), the buf allocated by memdup_user_nul() is leaked if kstrtoint() fails.

Fix this by using __free(kfree) to automatically free buf, eliminating the need for explicit kfree() calls and preventing leaks.

[Angelo: Added missing cleanup.h inclusion]

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 13f1bbcfb5822fcaacfc652017b57b79ffcacefa to 47a3e372f7d68776adb749a27c0ec9058ff1b4fd (excl.)
  • affected from 13f1bbcfb5822fcaacfc652017b57b79ffcacefa to 06195456c4e4de3826c4ca60eca941c472f991d0 (excl.)
  • affected from 13f1bbcfb5822fcaacfc652017b57b79ffcacefa to a58c97828911c0b6e25d6b556789da974003efda (excl.)
  • affected from 13f1bbcfb5822fcaacfc652017b57b79ffcacefa to 0f6498077faa9cd89bb787bcc57063494a6f0601 (excl.)
  • affected from 13f1bbcfb5822fcaacfc652017b57b79ffcacefa to 6bb10466e0884b4a68d4a1f3f4bb87eeb471c18a (excl.)
  • affected from 13f1bbcfb5822fcaacfc652017b57b79ffcacefa to 6259094ee806fb813ca95894c65fb80e2ec98bf1 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.0 is affected
  • unaffected from 0 to 6.0 (excl.)
  • unaffected from 6.1.165 to 6.1.* (incl.)
  • unaffected from 6.6.128 to 6.6.* (incl.)
  • unaffected from 6.12.75 to 6.12.* (incl.)
  • unaffected from 6.18.14 to 6.18.* (incl.)
  • unaffected from 6.19.4 to 6.19.* (incl.)
  • unaffected from 7.0 to * (incl.)

References