CVE-2023-53330

caif: fix memory leak in cfctrl_linkup_request()

MEDIUM

5.5

CVSS Score

Published: September 16, 2025 at 04:12 PM UTC

Updated: June 17, 2026 at 06:44 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.1%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: caif: fix memory leak in cfctrl_linkup_request() When linktype is unknown or kzalloc failed in cfctrl_linkup_request(), pkt is not released. Add release process to error path.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

2.6.35 ≤ v < 4.14.3032.6.35 ≤ v < 4.19.2702.6.35 ≤ v < 5.10.1632.6.35 ≤ v < 5.15.872.6.35 ≤ v < 5.4.2292.6.35 ≤ v < 6.0.192.6.35 ≤ v < 6.1.52.6.35 ≤ v < 6.24.15 ≤ v < 4.19.2704.20 ≤ v < 5.4.2295.11 ≤ v < 5.15.875.16 ≤ v < 6.0.195.5 ≤ v < 5.10.1636.1 ≤ v < 6.1.52.6.35 6.2 rc1 6.2 rc2b482cd2053e3b90a7b33a78c63cdb6badf2ec383

Vendor states this is fixed in 1dddeceb26002cfea4c375e92ac6498768dc7349 (fixed)

Vendor states this is fixed in 33df9c5d5e2a18c70f5f5f3c2757d654c1b6ffa3 (fixed)

Vendor states this is fixed in 3acf3783a84cbdf0c9f8cf2f32ee9c49af93a2da (fixed)

Vendor states this is fixed in 3ad47c8aa5648226184415e4a0cb1bf67ffbfd48 (fixed)

Vendor states this is fixed in 84b2cc7b36b7f6957d307fb3d01603f93cb2d655 (fixed)

Vendor states this is fixed in badea57569db04b010e922e29a7aaf40a979a70b (fixed)

Vendor states this is fixed in dc1bc903970bdf63ca40ab923d3ccb765da9a8d9 (fixed)

Vendor states this is fixed in fe69230f05897b3de758427b574fc98025dfc907 (fixed)

Vendor states this is fixed in 2.6.35 (unaffected)

Vendor states this is fixed in 4.14.303 (unaffected)

Vendor states this is fixed in 4.19.270 (unaffected)

Vendor states this is fixed in 5.10.163 (unaffected)

Vendor states this is fixed in 5.15.87 (unaffected)

Vendor states this is fixed in 5.4.229 (unaffected)

Vendor states this is fixed in 6.0.19 (unaffected)

Vendor states this is fixed in 6.1.5 (unaffected)

Vendor states this is fixed in 6.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references