Riskcovery

CVE-2023-54260

cifs: Fix lost destroy smbd connection when MR allocate failed

State
Published
Severity
Not scored
Published
Dec 30, 2025
Updated
May 11, 2026
Reserved
Dec 30, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix lost destroy smbd connection when MR allocate failed

If the MR allocate failed, the smb direct connection info is NULL, then smbd_destroy() will directly return, then the connection info will be leaked.

Let's set the smb direct connection info to the server before call smbd_destroy().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c7398583340a6d82b8bb7f7f21edcde27dc6a898 to before d303e25887127364a6765eaf7ac68aa2bac518a9Affected
  • c7398583340a6d82b8bb7f7f21edcde27dc6a898 to before 324c0c34fff1affd436e509325cb46739209704eAffected
  • c7398583340a6d82b8bb7f7f21edcde27dc6a898 to before caac205e0d5b44c4c23a10c6c0976d50ebe16ac2Affected
  • c7398583340a6d82b8bb7f7f21edcde27dc6a898 to before 46cd6c639cddba2bd2d810ceb16bb20374ad75b0Affected
  • c7398583340a6d82b8bb7f7f21edcde27dc6a898 to before c51ae01104b318bf15f3c5097faba5c72addba7aAffected
  • c7398583340a6d82b8bb7f7f21edcde27dc6a898 to before 04b7e13b8a13264282f874db5378fc3d3253cfacAffected
  • c7398583340a6d82b8bb7f7f21edcde27dc6a898 to before e9d3401d95d62a9531082cd2453ed42f2740e3fdAffected
LinuxLinux
  • 4.16Affected
  • before 4.16Not affected
  • 4.19.276 through 4.19.*Not affected
  • 5.4.235 through 5.4.*Not affected
  • 5.10.173 through 5.10.*Not affected
  • 5.15.99 through 5.15.*Not affected
  • 6.1.16 through 6.1.*Not affected
  • 6.2.3 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.