CVE-2023-53546

net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx

MEDIUM
5.5
CVSS Score
Published: October 4, 2025 at 03:16 PM UTC
Updated: June 17, 2026 at 06:45 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx when mlx5_cmd_exec failed in mlx5dr_cmd_create_reformat_ctx, the memory pointed by 'in' is not released, which will cause memory leak. Move memory release after mlx5_cmd_exec.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.11 ≤ v < 5.15.1265.16 ≤ v < 6.1.455.4 ≤ v < 5.10.1905.4 ≤ v < 5.15.1265.4 ≤ v < 5.4.2535.4 ≤ v < 6.1.455.4 ≤ v < 6.4.105.4 ≤ v < 6.55.5 ≤ v < 5.10.1906.2 ≤ v < 6.4.101d9186476e12c85dc81a0f01f5c614a9683af7f25.46.5 rc16.5 rc26.5 rc36.5 rc4
Vendor states this is fixed in 00cecb0a8f9e7a21754d5ad85813ab6b47b3308f (fixed)
Vendor states this is fixed in 165159854757dbae0dfd1812b27051da35aa6223 (fixed)
Vendor states this is fixed in 3169c3854397f3070a63b1b772db16dcb8cba7b4 (fixed)
Vendor states this is fixed in 5dd77585dd9d0e03dd1bceb95f0269a7eaf6b936 (fixed)
Vendor states this is fixed in 622d71d99124e69f7bf2e2b7a89f5f444a24d235 (fixed)
Vendor states this is fixed in 800d8c96bf997da5eb76ccf8d88795c4231c83fb (fixed)
Vendor states this is fixed in 5.10.190 (unaffected)
Vendor states this is fixed in 5.15.126 (unaffected)
Vendor states this is fixed in 5.4 (unaffected)
Vendor states this is fixed in 5.4.253 (unaffected)
Vendor states this is fixed in 6.1.45 (unaffected)
Vendor states this is fixed in 6.4.10 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card