CVE-2023-54169
published 2025-12-30CVE-2023-54169: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix memory leak in mlx5e_ptp_open When kvzalloc_node or kvzalloc failed in…
PriorityP416medium6.2
EPSS
0.17%
7.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: fix memory leak in mlx5e_ptp_open
When kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory
pointed by "c" or "cparams" is not freed, which can lead to a memory
leak. Fix by freeing the array in the error path.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 145e5637d941daec2e8d1ff21676cbf1aa62cf4d < 4892e1e548b5bd6524c1c89df06e4849df26fc20 | 4892e1e548b5bd6524c1c89df06e4849df26fc20 |
| linux | linux | >= 145e5637d941daec2e8d1ff21676cbf1aa62cf4d < 83a8f7337a14cdb215c76a8f4cf3f3be8b59177d | 83a8f7337a14cdb215c76a8f4cf3f3be8b59177d |
| linux | linux | >= 145e5637d941daec2e8d1ff21676cbf1aa62cf4d < 7035e3ae600c4e9cb3dc220c24dd77112ddff8b1 | 7035e3ae600c4e9cb3dc220c24dd77112ddff8b1 |
| linux | linux | >= 145e5637d941daec2e8d1ff21676cbf1aa62cf4d < d543b649ffe58a0cb4b6948b3305069c5980a1fa | d543b649ffe58a0cb4b6948b3305069c5980a1fa |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 5.11.0 < 5.15.121 | 5.15.121 |
| linux | linux_kernel | >= 5.16.0 < 6.1.40 | 6.1.40 |
| linux | linux_kernel | >= 6.2.0 < 6.4.5 | 6.4.5 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-w746-97c4-584x: In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: fix memory leak in mlx5e_ptp_open
When kvzalloc_node or kvzalloc fail
ghsa_unreviewed·2025-12-30
CVE-2023-54169 GHSA-w746-97c4-584x: In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: fix memory leak in mlx5e_ptp_open
When kvzalloc_node or kvzalloc fail
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: fix memory leak in mlx5e_ptp_open
When kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory
pointed by "c" or "cparams" is not freed, which can lead to a memory
leak. Fix by freeing the array in the error path.
OSV
CVE-2023-54169: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix memory leak in mlx5e_ptp_open When kvzalloc_node or kvzalloc failed
osv·2025-12-30
CVE-2023-54169 CVE-2023-54169: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix memory leak in mlx5e_ptp_open When kvzalloc_node or kvzalloc failed
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix memory leak in mlx5e_ptp_open When kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory pointed by "c" or "cparams" is not freed, which can lead to a memory leak. Fix by freeing the array in the error path.
OSV
net/mlx5e: fix memory leak in mlx5e_ptp_open
osv·2025-12-30
CVE-2023-54169 net/mlx5e: fix memory leak in mlx5e_ptp_open
net/mlx5e: fix memory leak in mlx5e_ptp_open
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: fix memory leak in mlx5e_ptp_open
When kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory
pointed by "c" or "cparams" is not freed, which can lead to a memory
leak. Fix by freeing the array in the error path.
Red Hat
kernel: net/mlx5e: fix memory leak in mlx5e_ptp_open
vendor_redhat·2025-12-30·CVSS 6.2
CVE-2023-54169 [MEDIUM] CWE-401 kernel: net/mlx5e: fix memory leak in mlx5e_ptp_open
kernel: net/mlx5e: fix memory leak in mlx5e_ptp_open
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: fix memory leak in mlx5e_ptp_open
When kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory
pointed by "c" or "cparams" is not freed, which can lead to a memory
leak. Fix by freeing the array in the error path.
A flaw was found in the Linux kernel net/mlx5e Ethernet driver’s mlx5e_ptp_open function. When memory allocation via kvzalloc_node() or kvzalloc() fails, previously allocated resources (c or cparams) were not properly freed, leading to a memory leak in the error path. An unprivileged local user interacting with the networking subsystem might trigger this condition, causing gradual memory consumption.
Mitigation: Mitigation for this issue is
Debian
CVE-2023-54169: linux - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: ...
vendor_debian·2023
CVE-2023-54169 CVE-2023-54169: linux - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: ...
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix memory leak in mlx5e_ptp_open When kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory pointed by "c" or "cparams" is not freed, which can lead to a memory leak. Fix by freeing the array in the error path.
Scope: local
bookworm: resolved (fixed in 6.1.52-1)
bullseye: resolved
forky: resolved (fixed in 6.4.11-1)
sid: resolved (fixed in 6.4.11-1)
trixie: resolved (fixed in 6.4.11-1)
No detection rules found.
No public exploits indexed.
Wiz
CVE-2023-54169 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54169 CVE-2023-54169 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54169 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: fix memory leak in mlx5e_ptp_open
When kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory
pointed by "c" or "cparams" is not freed, which can lead to a memory
leak. Fix by freeing the array in the error path.
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 7.4
Exploitation Probability (EPSS) N/A
Affected packages and libraries
kernel-source-vanilla
dtb-marvell
Sources
NVD
Debian 12, 13, 14 Has Fix Added at: Dec 31, 2025
Bugzilla
CVE-2023-54169 kernel: net/mlx5e: fix memory leak in mlx5e_ptp_open
bugzilla·2025-12-30
CVE-2023-54169 [MEDIUM] CVE-2023-54169 kernel: net/mlx5e: fix memory leak in mlx5e_ptp_open
CVE-2023-54169 kernel: net/mlx5e: fix memory leak in mlx5e_ptp_open
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: fix memory leak in mlx5e_ptp_open
When kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory
pointed by "c" or "cparams" is not freed, which can lead to a memory
leak. Fix by freeing the array in the error path.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123020-CVE-2023-54169-21bb@gregkh/T
2025-12-30
Published