CVE-2023-54260

cifs: Fix lost destroy smbd connection when MR allocate failed

N/A

Published: December 30, 2025 at 12:15 PM UTC

Updated: June 17, 2026 at 06:47 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbd_destroy() will directly return, then the connection info will be leaked. Let's set the smb direct connection info to the server before call smbd_destroy().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.16 ≤ v < 4.19.2764.16 ≤ v < 5.10.1734.16 ≤ v < 5.15.994.16 ≤ v < 5.4.2354.16 ≤ v < 6.1.164.16 ≤ v < 6.2.34.16 ≤ v < 6.34.16c7398583340a6d82b8bb7f7f21edcde27dc6a898

Vendor states this is fixed in 04b7e13b8a13264282f874db5378fc3d3253cfac (fixed)

Vendor states this is fixed in 324c0c34fff1affd436e509325cb46739209704e (fixed)

Vendor states this is fixed in 46cd6c639cddba2bd2d810ceb16bb20374ad75b0 (fixed)

Vendor states this is fixed in c51ae01104b318bf15f3c5097faba5c72addba7a (fixed)

Vendor states this is fixed in caac205e0d5b44c4c23a10c6c0976d50ebe16ac2 (fixed)

Vendor states this is fixed in d303e25887127364a6765eaf7ac68aa2bac518a9 (fixed)

Vendor states this is fixed in e9d3401d95d62a9531082cd2453ed42f2740e3fd (fixed)

Vendor states this is fixed in 4.16 (unaffected)

Vendor states this is fixed in 4.19.276 (unaffected)

Vendor states this is fixed in 5.10.173 (unaffected)

Vendor states this is fixed in 5.15.99 (unaffected)

Vendor states this is fixed in 5.4.235 (unaffected)