Riskcovery

CVE-2023-53371

net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create

State
Published
Severity
5.5 Medium
Published
Sep 18, 2025
Updated
May 11, 2026
Reserved
Sep 17, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create

The memory pointed to by the fs->any pointer is not freed in the error path of mlx5e_fs_tt_redirect_any_create, which can lead to a memory leak. Fix by freeing the memory in the error path, thereby making the error path identical to mlx5e_fs_tt_redirect_any_destroy().

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 0f575c20bf0686caf3d82d6c626c2e1e4a4c36e6 to before 75df2fe6d160e16be880aacacd521b135d7177c9Affected
  • 0f575c20bf0686caf3d82d6c626c2e1e4a4c36e6 to before 8a75a6f169c3df3a94802314aa61282772ac75b8Affected
  • 0f575c20bf0686caf3d82d6c626c2e1e4a4c36e6 to before 3250affdc658557a41df9c5fb567723e421f8bf2Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 6.1.40 through 6.1.*Not affected
  • 6.4.5 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.