CVE-2023-53330

caif: fix memory leak in cfctrl_linkup_request()

State: Published
Severity: 5.5 Medium
Published: Sep 16, 2025
Updated: May 11, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

caif: fix memory leak in cfctrl_linkup_request()

When linktype is unknown or kzalloc failed in cfctrl_linkup_request(), pkt is not released. Add release process to error path.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before badea57569db04b010e922e29a7aaf40a979a70bAffected b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before 3acf3783a84cbdf0c9f8cf2f32ee9c49af93a2daAffected b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before 33df9c5d5e2a18c70f5f5f3c2757d654c1b6ffa3Affected b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before 84b2cc7b36b7f6957d307fb3d01603f93cb2d655Affected b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before dc1bc903970bdf63ca40ab923d3ccb765da9a8d9Affected b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before 1dddeceb26002cfea4c375e92ac6498768dc7349Affected b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before 3ad47c8aa5648226184415e4a0cb1bf67ffbfd48Affected b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before fe69230f05897b3de758427b574fc98025dfc907Affected
LinuxLinux	2.6.35Affected before 2.6.35Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.87 through 5.15.Not affected 6.0.19 through 6.0.Not affected 6.1.5 through 6.1.*Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before badea57569db04b010e922e29a7aaf40a979a70bAffected
b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before 3acf3783a84cbdf0c9f8cf2f32ee9c49af93a2daAffected
b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before 33df9c5d5e2a18c70f5f5f3c2757d654c1b6ffa3Affected
b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before 84b2cc7b36b7f6957d307fb3d01603f93cb2d655Affected
b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before dc1bc903970bdf63ca40ab923d3ccb765da9a8d9Affected
b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before 1dddeceb26002cfea4c375e92ac6498768dc7349Affected
b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before 3ad47c8aa5648226184415e4a0cb1bf67ffbfd48Affected
b482cd2053e3b90a7b33a78c63cdb6badf2ec383 to before fe69230f05897b3de758427b574fc98025dfc907Affected

LinuxLinux

2.6.35Affected
before 2.6.35Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.87 through 5.15.*Not affected
6.0.19 through 6.0.*Not affected
6.1.5 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.