CVE-2023-54162

HighCVSS 8.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix possible memory leak in smb2_lock()

argv needs to be free when setup_async_work fails or when the current process is woken up.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < bfe8372ef2dbdce97f13b21d76e2080ddeef5a79; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 6bf555ed8938444466c3d7f3252eb874a518f293; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 11d38f8a0c19763e34d2093b5ecb640e012cb2d2; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < d3ca9f7aeba793d74361d88a8800b2f205c9236b
LinuxLinux5.15

References

Timeline

Published
Dec 30, 2025
Last modified
Aug 4, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-541637.5NLB mKlik Macedonia 3.3.12 contains a SQL injection vulnerability in international transfer parameters that allows attackers to manipulate dCVE-2023-541648.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix iso_conn related locking and validity issues sk->sCVE-2023-541657.8In the Linux kernel, the following vulnerability has been resolved: zsmalloc: move LRU update from zs_map_object() to zs_malloc() Under meCVE-2023-541667.8In the Linux kernel, the following vulnerability has been resolved: igc: Fix Kernel Panic during ndo_tx_timeout callback The Xeon validatiCVE-2023-54167In the Linux kernel, the following vulnerability has been resolved: m68k: mm: Move initrd phys_to_virt handling after paging_init() When bCVE-2023-541687.8In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() The ucmd->log_CVE-2023-54169In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix memory leak in mlx5e_ptp_open When kvzalloc_node or kvzCVE-2023-54174.3The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_uCVE-2023-54170In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assoc_array When makiCVE-2023-54171In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak of iter->temp when reading trace_pipe kmemleaCVE-2023-54172In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction OnCVE-2023-541737.8In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_event_output We received report [1] of
CVE-2023-54162: High severity, CVSS 8.8 | Vulnix