Back to CVE records
Not yet scoredPublished Oct 22, 2025

CVE-2023-53708ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects If a badly constructed firmware includes multiple `ACPI_TYPE_PACKAGE` objects while evaluating the AMD LPS0 _DSM, there will be a memory leak. Explicitly guard against this.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
May 11, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
146f1ed852a87b802ed6e71c31e189c64871383c builds before 7b7964cd9db30bc84808a40d13a0633b4313f149; 146f1ed852a87b802ed6e71c31e189c64871383c builds before 1ea7e47807279369c82718efd2677ea25c6579e3; 146f1ed852a87b802ed6e71c31e189c64871383c builds before 9e8bbde9293151430884aed882a88eaa22298f72; from 146f1ed852a87b802ed6e71c31e189c64871383c before 883cf0d4cf288313b71146ddebdf5d647b76c78b
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.