CVE-2023-54064
published 2025-12-24CVE-2023-54064: In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find()…
PriorityP418low5.5
EPSS
0.18%
8.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
ipmi:ssif: Fix a memory leak when scanning for an adapter
The adapter scan ssif_info_find() sets info->adapter_name if the adapter
info came from SMBIOS, as it's not set in that case. However, this
function can be called more than once, and it will leak the adapter name
if it had already been set. So check for NULL before setting it.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.55-1 (bookworm) | linux 6.1.55-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= c4436c9149c5d2bc0c49ab57ec85c75ea1c4d61c < de677f4379fa67f650e367c188a0f80bee9b6732 | de677f4379fa67f650e367c188a0f80bee9b6732 |
| linux | linux | >= c4436c9149c5d2bc0c49ab57ec85c75ea1c4d61c < 13623b966bb6d36ba61646b69cd49cdac6e4978a | 13623b966bb6d36ba61646b69cd49cdac6e4978a |
| linux | linux | >= c4436c9149c5d2bc0c49ab57ec85c75ea1c4d61c < 3ad53071fe8547eb8d8813971844cc43246008ee | 3ad53071fe8547eb8d8813971844cc43246008ee |
| linux | linux | >= c4436c9149c5d2bc0c49ab57ec85c75ea1c4d61c < 74a1194cce60a90723d0fe148863c18931a31153 | 74a1194cce60a90723d0fe148863c18931a31153 |
| linux | linux | >= c4436c9149c5d2bc0c49ab57ec85c75ea1c4d61c < 7db16d2e791bf2ec3e0249f56b7ec81c35bba6e6 | 7db16d2e791bf2ec3e0249f56b7ec81c35bba6e6 |
| linux | linux | >= c4436c9149c5d2bc0c49ab57ec85c75ea1c4d61c < b870caeb18041f856893066ded81c560db3d56cc | b870caeb18041f856893066ded81c560db3d56cc |
| linux | linux | >= c4436c9149c5d2bc0c49ab57ec85c75ea1c4d61c < b8d72e32e1453d37ee5c8a219f24e7eeadc471ef | b8d72e32e1453d37ee5c8a219f24e7eeadc471ef |
| linux | linux_kernel | >= 0 < 5.10.197-1 | 5.10.197-1 |
| linux | linux_kernel | >= 0 < 6.1.55-1 | 6.1.55-1 |
| linux | linux_kernel | >= 0 < 6.5.3-1 | 6.5.3-1 |
| linux | linux_kernel | >= 0 < 6.5.3-1 | 6.5.3-1 |
| linux | linux_kernel | >= 5.11.0 < 5.15.132 | 5.15.132 |
| linux | linux_kernel | >= 5.16.0 < 6.1.53 | 6.1.53 |
| linux | linux_kernel | >= 5.4.0 < 5.4.257 | 5.4.257 |
| linux | linux_kernel | >= 5.5.0 < 5.10.195 | 5.10.195 |
| linux | linux_kernel | >= 6.2.0 < 6.4.16 | 6.4.16 |
| linux | linux_kernel | >= 6.5.0 < 6.5.3 | 6.5.3 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-54064: In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_in
osv·2025-12-24
CVE-2023-54064 CVE-2023-54064: In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_in
In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find() sets info->adapter_name if the adapter info came from SMBIOS, as it's not set in that case. However, this function can be called more than once, and it will leak the adapter name if it had already been set. So check for NULL before setting it.
GHSA
GHSA-5xvr-xv5p-xjpr: In the Linux kernel, the following vulnerability has been resolved:
ipmi:ssif: Fix a memory leak when scanning for an adapter
The adapter scan ssif_
ghsa_unreviewed·2025-12-24
CVE-2023-54064 GHSA-5xvr-xv5p-xjpr: In the Linux kernel, the following vulnerability has been resolved:
ipmi:ssif: Fix a memory leak when scanning for an adapter
The adapter scan ssif_
In the Linux kernel, the following vulnerability has been resolved:
ipmi:ssif: Fix a memory leak when scanning for an adapter
The adapter scan ssif_info_find() sets info->adapter_name if the adapter
info came from SMBIOS, as it's not set in that case. However, this
function can be called more than once, and it will leak the adapter name
if it had already been set. So check for NULL before setting it.
OSV
ipmi:ssif: Fix a memory leak when scanning for an adapter
osv·2025-12-24
CVE-2023-54064 ipmi:ssif: Fix a memory leak when scanning for an adapter
ipmi:ssif: Fix a memory leak when scanning for an adapter
In the Linux kernel, the following vulnerability has been resolved:
ipmi:ssif: Fix a memory leak when scanning for an adapter
The adapter scan ssif_info_find() sets info->adapter_name if the adapter
info came from SMBIOS, as it's not set in that case. However, this
function can be called more than once, and it will leak the adapter name
if it had already been set. So check for NULL before setting it.
Red Hat
kernel: ipmi:ssif: Fix a memory leak when scanning for an adapter
vendor_redhat·2025-12-24·CVSS 5.5
CVE-2023-54064 [LOW] kernel: ipmi:ssif: Fix a memory leak when scanning for an adapter
kernel: ipmi:ssif: Fix a memory leak when scanning for an adapter
In the Linux kernel, the following vulnerability has been resolved:
ipmi:ssif: Fix a memory leak when scanning for an adapter
The adapter scan ssif_info_find() sets info->adapter_name if the adapter
info came from SMBIOS, as it's not set in that case. However, this
function can be called more than once, and it will leak the adapter name
if it had already been set. So check for NULL before setting it.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Fix deferred
Package: kernel-
Debian
CVE-2023-54064: linux - In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: ...
vendor_debian·2023
CVE-2023-54064 CVE-2023-54064: linux - In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: ...
In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find() sets info->adapter_name if the adapter info came from SMBIOS, as it's not set in that case. However, this function can be called more than once, and it will leak the adapter name if it had already been set. So check for NULL before setting it.
Scope: local
bookworm: resolved (fixed in 6.1.55-1)
bullseye: resolved (fixed in 5.10.197-1)
forky: resolved (fixed in 6.5.3-1)
sid: resolved (fixed in 6.5.3-1)
trixie: resolved (fixed in 6.5.3-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-54064 kernel: Kernel: Memory leak in IPMI SSIF module leads to Denial of Service
bugzilla·2025-12-24
CVE-2023-54064 [LOW] CVE-2023-54064 kernel: Kernel: Memory leak in IPMI SSIF module leads to Denial of Service
CVE-2023-54064 kernel: Kernel: Memory leak in IPMI SSIF module leads to Denial of Service
In the Linux kernel, the following vulnerability has been resolved:
ipmi:ssif: Fix a memory leak when scanning for an adapter
The adapter scan ssif_info_find() sets info->adapter_name if the adapter
info came from SMBIOS, as it's not set in that case. However, this
function can be called more than once, and it will leak the adapter name
if it had already been set. So check for NULL before setting it.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122429-CVE-2023-54064-7509@gregkh/T
Wiz
CVE-2023-54064 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54064 CVE-2023-54064 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54064 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
ipmi:ssif: Fix a memory leak when scanning for an adapter
The adapter scan ssif_info_find() sets info->adapter_name if the adapter
info came from SMBIOS, as it's not set in that case. However, this
function can be called more than once, and it will leak the adapter name
if it had already been set. So check for NULL before setting it.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 10.8
Exploitation Probability (EPSS) N/A
Affected packages and libra
https://git.kernel.org/stable/c/13623b966bb6d36ba61646b69cd49cdac6e4978ahttps://git.kernel.org/stable/c/3ad53071fe8547eb8d8813971844cc43246008eehttps://git.kernel.org/stable/c/74a1194cce60a90723d0fe148863c18931a31153https://git.kernel.org/stable/c/7db16d2e791bf2ec3e0249f56b7ec81c35bba6e6https://git.kernel.org/stable/c/b870caeb18041f856893066ded81c560db3d56cchttps://git.kernel.org/stable/c/b8d72e32e1453d37ee5c8a219f24e7eeadc471efhttps://git.kernel.org/stable/c/de677f4379fa67f650e367c188a0f80bee9b6732
2025-12-24
Published