Vulnerability in Linux

CVE-2023-53708

In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects If a badly constructed firmware includes multiple `ACPI_TYPE_PACKAGE` objects while evaluating the AMD LPS0 _DSM, there will be a memory leak. Explicitly guard against this.

EPSS: 0.002 (10.1th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 146f1ed852a87b802ed6e71c31e189c64871383c, 5.11, 0

References