Riskcovery

CVE-2023-54162

ksmbd: fix possible memory leak in smb2_lock()

State
Published
Severity
8.8 High
Published
Dec 30, 2025
Updated
Aug 5, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix possible memory leak in smb2_lock()

argv needs to be free when setup_async_work fails or when the current process is woken up.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before bfe8372ef2dbdce97f13b21d76e2080ddeef5a79Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 6bf555ed8938444466c3d7f3252eb874a518f293Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 11d38f8a0c19763e34d2093b5ecb640e012cb2d2Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before d3ca9f7aeba793d74361d88a8800b2f205c9236bAffected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.145 through 5.15.*Not affected
  • 6.1.16 through 6.1.*Not affected
  • 6.2.3 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.