CVE-2023-54106 — Missing Release of Resource after Effective Lifetime in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: fix potential memory leak in mlx5e_init_rep_rx
The memory pointed to by the priv->rx_res pointer is not freed in the error
path of mlx5e_init_rep_rx, which can lead to a memory leak. Fix by freeing
the memory in the error path, thereby making the error path identical to
mlx5e_cleanup_rep_rx().
Affected Packages4 packages
▶CVEListV5linux/linuxaf8bbf7300686961f74e72e2dc10a76672603cb3 — 0582a3caaa3e2f7b80bcb113ad3c910eac15a63e+3
🔴Vulnerability Details
3OSV▶
CVE-2023-54106: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fix potential memory leak in mlx5e_init_rep_rx The memory pointed to by↗2025-12-24
GHSA▶
GHSA-2c4h-2ghg-m6fj: In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: fix potential memory leak in mlx5e_init_rep_rx
The memory pointed to b↗2025-12-24