Riskcovery

CVE-2023-53008

cifs: fix potential memory leaks in session setup

State
Published
Severity
5.5 Medium
Published
Mar 27, 2025
Updated
May 11, 2026
Reserved
Mar 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix potential memory leaks in session setup

Make sure to free cifs_ses::auth_key.response before allocating it as we might end up leaking memory in reconnect or mounting.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • d3686d54c7902a303bd65d751226aa1647319863 to before 893d45394dbe4b5cbf3723c19e2ccc8b93a6ac9bAffected
  • d3686d54c7902a303bd65d751226aa1647319863 to before 2fe58d977ee05da5bb89ef5dc4f5bf2dc15db46fAffected
LinuxLinux
  • 2.6.37Affected
  • before 2.6.37Not affected
  • 6.1.9 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.