Bug 2492392 (CVE-2026-53121)

Summary:	CVE-2026-53121 kernel: amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init()
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	NEW ---	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	rhel-process-autobot, watson-tool-maintainers
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in the Linux kernel's amd-pstate driver. When the amd_pstate_epp_cpu_init() function fails to set the Energy Performance Preference (EPP), it does not properly free a previously allocated data object. This oversight leads to a memory leak, which could result in resource exhaustion over time and potentially cause a Denial of Service (DoS) condition on the affected system.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-06-24 18:09:34 UTC

In the Linux kernel, the following vulnerability has been resolved:

amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init()

On failure to set the epp, the function amd_pstate_epp_cpu_init()
returns with an error code without freeing the cpudata object that was
allocated at the beginning of the function.

Ensure that the cpudata object is freed before returning from the
function.

This memory leak was discovered by Claude Opus 4.6 with the aid of
Chris Mason's AI review-prompts
(https://github.com/masoncl/review-prompts/tree/main/kernel).

Comment 1 Mauro Matteo Cascella 2026-06-26 15:05:42 UTC

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026062416-CVE-2026-53121-f105@gregkh/T