CVE-2023-53546

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx when mlx5_cmd_exec failed in mlx5dr_cmd_create_reformat_ctx, the memory pointed by 'in' is not released, which will cause memory leak. Move memory release after mlx5_cmd_exec.

Rincian

Terbit di NVD

4 Oktober 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/00cecb0a8f9e7a21754d5ad85813ab6b47b3308f patch
• https://git.kernel.org/stable/c/165159854757dbae0dfd1812b27051da35aa6223 patch
• https://git.kernel.org/stable/c/3169c3854397f3070a63b1b772db16dcb8cba7b4 patch
• https://git.kernel.org/stable/c/5dd77585dd9d0e03dd1bceb95f0269a7eaf6b936 patch
• https://git.kernel.org/stable/c/622d71d99124e69f7bf2e2b7a89f5f444a24d235 patch
• https://git.kernel.org/stable/c/800d8c96bf997da5eb76ccf8d88795c4231c83fb patch