CVE-2026-53121
Low risk· EPSS 5%Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A memory leak was discovered in the Linux kernel's amd-pstate driver in the amd_pstate_epp_cpu_init() function. When setting the energy performance preference (epp) fails, the function returns an error code without freeing the previously allocated cpudata object.
Risk Assessment
This memory leak can gradually deplete available system memory, potentially leading to performance degradation or system failure over time.
Recommendation
It is recommended to update the Linux kernel to a version containing the fix that ensures the cpudata object is freed before returning an error in the amd_pstate_epp_cpu_init() function.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init() On failure to set the epp, the function amd_pstate_epp_cpu_init() returns with an error code without freeing the cpudata object that was allocated at the beginning of the function. Ensure that the cpudata object is freed before returning from the function. This memory leak was discovered by Claude Opus 4.6 with the aid of Chris Mason's AI review-prompts (https://github.com/masoncl/review-prompts/tree/main/kernel).