CVE-2023-54260
published 2025-12-30CVE-2023-54260: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed…
PriorityP419low3.3
EPSS
0.18%
7.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix lost destroy smbd connection when MR allocate failed
If the MR allocate failed, the smb direct connection info is NULL,
then smbd_destroy() will directly return, then the connection info
will be leaked.
Let's set the smb direct connection info to the server before call
smbd_destroy().
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.20-1 (bookworm) | linux 6.1.20-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= c7398583340a6d82b8bb7f7f21edcde27dc6a898 < d303e25887127364a6765eaf7ac68aa2bac518a9 | d303e25887127364a6765eaf7ac68aa2bac518a9 |
| linux | linux | >= c7398583340a6d82b8bb7f7f21edcde27dc6a898 < 324c0c34fff1affd436e509325cb46739209704e | 324c0c34fff1affd436e509325cb46739209704e |
| linux | linux | >= c7398583340a6d82b8bb7f7f21edcde27dc6a898 < caac205e0d5b44c4c23a10c6c0976d50ebe16ac2 | caac205e0d5b44c4c23a10c6c0976d50ebe16ac2 |
| linux | linux | >= c7398583340a6d82b8bb7f7f21edcde27dc6a898 < 46cd6c639cddba2bd2d810ceb16bb20374ad75b0 | 46cd6c639cddba2bd2d810ceb16bb20374ad75b0 |
| linux | linux | >= c7398583340a6d82b8bb7f7f21edcde27dc6a898 < c51ae01104b318bf15f3c5097faba5c72addba7a | c51ae01104b318bf15f3c5097faba5c72addba7a |
| linux | linux | >= c7398583340a6d82b8bb7f7f21edcde27dc6a898 < 04b7e13b8a13264282f874db5378fc3d3253cfac | 04b7e13b8a13264282f874db5378fc3d3253cfac |
| linux | linux | >= c7398583340a6d82b8bb7f7f21edcde27dc6a898 < e9d3401d95d62a9531082cd2453ed42f2740e3fd | e9d3401d95d62a9531082cd2453ed42f2740e3fd |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 4.16.0 < 4.19.276 | 4.19.276 |
| linux | linux_kernel | >= 4.20.0 < 5.4.235 | 5.4.235 |
| linux | linux_kernel | >= 5.11.0 < 5.15.99 | 5.15.99 |
| linux | linux_kernel | >= 5.16.0 < 6.1.16 | 6.1.16 |
| linux | linux_kernel | >= 5.5.0 < 5.10.173 | 5.10.173 |
| linux | linux_kernel | >= 6.2.0 < 6.2.3 | 6.2.3 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-54260: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate
osv·2025-12-30
CVE-2023-54260 CVE-2023-54260: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbd_destroy() will directly return, then the connection info will be leaked. Let's set the smb direct connection info to the server before call smbd_destroy().
OSV
cifs: Fix lost destroy smbd connection when MR allocate failed
osv·2025-12-30
CVE-2023-54260 cifs: Fix lost destroy smbd connection when MR allocate failed
cifs: Fix lost destroy smbd connection when MR allocate failed
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix lost destroy smbd connection when MR allocate failed
If the MR allocate failed, the smb direct connection info is NULL,
then smbd_destroy() will directly return, then the connection info
will be leaked.
Let's set the smb direct connection info to the server before call
smbd_destroy().
GHSA
GHSA-53m3-7xgw-52vj: In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix lost destroy smbd connection when MR allocate failed
If the MR allocat
ghsa_unreviewed·2025-12-30
CVE-2023-54260 GHSA-53m3-7xgw-52vj: In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix lost destroy smbd connection when MR allocate failed
If the MR allocat
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix lost destroy smbd connection when MR allocate failed
If the MR allocate failed, the smb direct connection info is NULL,
then smbd_destroy() will directly return, then the connection info
will be leaked.
Let's set the smb direct connection info to the server before call
smbd_destroy().
Red Hat
kernel: cifs: Fix lost destroy smbd connection when MR allocate failed
vendor_redhat·2025-12-30·CVSS 3.3
CVE-2023-54260 [LOW] CWE-772 kernel: cifs: Fix lost destroy smbd connection when MR allocate failed
kernel: cifs: Fix lost destroy smbd connection when MR allocate failed
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix lost destroy smbd connection when MR allocate failed
If the MR allocate failed, the smb direct connection info is NULL,
then smbd_destroy() will directly return, then the connection info
will be leaked.
Let's set the smb direct connection info to the server before call
smbd_destroy().
A memory leak flaw was found in the Linux kernel's CIFS SMB Direct implementation. When memory region (MR) allocation fails during SMB Direct connection setup, the smbd_destroy() function returns early without cleaning up the connection info structure, resulting in a memory leak.
Statement: This leak occurs only during SMB Direct connection failures, specifica
Debian
CVE-2023-54260: linux - In the Linux kernel, the following vulnerability has been resolved: cifs: Fix l...
vendor_debian·2023
CVE-2023-54260 CVE-2023-54260: linux - In the Linux kernel, the following vulnerability has been resolved: cifs: Fix l...
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbd_destroy() will directly return, then the connection info will be leaked. Let's set the smb direct connection info to the server before call smbd_destroy().
Scope: local
bookworm: resolved (fixed in 6.1.20-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.20-1)
sid: resolved (fixed in 6.1.20-1)
trixie: resolved (fixed in 6.1.20-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-54260 kernel: cifs: Fix lost destroy smbd connection when MR allocate failed
bugzilla·2025-12-30
CVE-2023-54260 [LOW] CVE-2023-54260 kernel: cifs: Fix lost destroy smbd connection when MR allocate failed
CVE-2023-54260 kernel: cifs: Fix lost destroy smbd connection when MR allocate failed
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix lost destroy smbd connection when MR allocate failed
If the MR allocate failed, the smb direct connection info is NULL,
then smbd_destroy() will directly return, then the connection info
will be leaked.
Let's set the smb direct connection info to the server before call
smbd_destroy().
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123057-CVE-2023-54260-cc1d@gregkh/T
Wiz
CVE-2023-54260 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54260 CVE-2023-54260 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54260 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix lost destroy smbd connection when MR allocate failed
If the MR allocate failed, the smb direct connection info is NULL,
then smbd_destroy() will directly return, then the connection info
will be leaked.
Let's set the smb direct connection info to the server before call
smbd_destroy().
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 10.8
Exploitation Probability (EPSS) N/A
Affected packages and libraries
kernel-rt-64k-debug-modules
kern
https://git.kernel.org/stable/c/04b7e13b8a13264282f874db5378fc3d3253cfachttps://git.kernel.org/stable/c/324c0c34fff1affd436e509325cb46739209704ehttps://git.kernel.org/stable/c/46cd6c639cddba2bd2d810ceb16bb20374ad75b0https://git.kernel.org/stable/c/c51ae01104b318bf15f3c5097faba5c72addba7ahttps://git.kernel.org/stable/c/caac205e0d5b44c4c23a10c6c0976d50ebe16ac2https://git.kernel.org/stable/c/d303e25887127364a6765eaf7ac68aa2bac518a9https://git.kernel.org/stable/c/e9d3401d95d62a9531082cd2453ed42f2740e3fd
2025-12-30
Published