Executive brief
A memory leak was identified in the MediaTek Smart Voltage Scaling (SVS) driver within the Linux kernel. This component is responsible for optimizing power consumption on MediaTek processors. If exploited, this flaw could allow a local user to gradually consume system memory, potentially leading to system instability or a denial-of-service condition over time.
Technical details
A memory leak exists in the svs_enable_debug_write() function within drivers/soc/mediatek/mtk-svs.c. The vulnerability occurs because a buffer allocated via memdup_user_nul() is not released if the subsequent kstrtoint() call fails. An attacker with access to the debugfs or relevant driver interface could repeatedly trigger this failure path to exhaust kernel memory. The fix implements the __free(kfree) cleanup attribute to ensure the buffer is automatically deallocated regardless of the function's exit path.
Affected products
- Linux Linux kernel drivers/soc/mediatek/mtk-svs.c
Timeline
- 2026-05-27: advisory: NVD publication date
- 2026-01-08: patched: Initial patch by AngeloGioacchino Del Regno
References
- https://git.kernel.org/stable/c/06195456c4e4de3826c4ca60eca941c472f991d0
- https://git.kernel.org/stable/c/0f6498077faa9cd89bb787bcc57063494a6f0601
- https://git.kernel.org/stable/c/47a3e372f7d68776adb749a27c0ec9058ff1b4fd
- https://git.kernel.org/stable/c/6259094ee806fb813ca95894c65fb80e2ec98bf1
- https://git.kernel.org/stable/c/6bb10466e0884b4a68d4a1f3f4bb87eeb471c18a
- https://git.kernel.org/stable/c/a58c97828911c0b6e25d6b556789da974003efda