Vulnerability details

CVE-2023-54162

Linux Linux

ksmbd: fix possible memory leak in smb2_lock()

CVSS 3.1
8.8High

Official description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible memory leak in smb2_lock() argv needs to be free when setup_async_work fails or when the current process is woken up.

CVSS scores

ScoreVersionSourceVector
8.8High 3.1 CVEProject cvelistV5 (CNA) (Linux) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
Linux Linux 5.15 CVEProject cvelistV5 (CNA)
Linux Linux e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 ≤ v < bfe8372ef2dbdce97f13b21d76e2080ddeef5a79 CVEProject cvelistV5 (CNA)
Linux Linux e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 ≤ v < 6bf555ed8938444466c3d7f3252eb874a518f293 CVEProject cvelistV5 (CNA)
Linux Linux e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 ≤ v < 11d38f8a0c19763e34d2093b5ecb640e012cb2d2 CVEProject cvelistV5 (CNA)
Linux Linux e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 ≤ v < d3ca9f7aeba793d74361d88a8800b2f205c9236b CVEProject cvelistV5 (CNA)

References and advisories

4
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-12-30
Last updated
2026-08-05
State
Published
Assigner (CNA)
Linux

Exploit prediction (EPSS)

0.39%
Probability of exploitation in 30 days
33.3%
Percentile (among all CVEs)

Weaknesses (CWE)

  • —