github - ghsa-gpc8-vf5r-8fj8

ghsa-gpc8-vf5r-8fj8

Vulnerability from github

Published

2025-12-30 12:30

Modified

2025-12-30 12:30

Details

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix possible memory leak in smb2_lock()

argv needs to be free when setup_async_work fails or when the current process is woken up.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-54162"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-12-30T12:15:44Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix possible memory leak in smb2_lock()\n\nargv needs to be free when setup_async_work fails or when the current\nprocess is woken up.",
  "id": "GHSA-gpc8-vf5r-8fj8",
  "modified": "2025-12-30T12:30:29Z",
  "published": "2025-12-30T12:30:29Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-54162"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/11d38f8a0c19763e34d2093b5ecb640e012cb2d2"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/6bf555ed8938444466c3d7f3252eb874a518f293"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/bfe8372ef2dbdce97f13b21d76e2080ddeef5a79"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d3ca9f7aeba793d74361d88a8800b2f205c9236b"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2023-54162 (GCVE-0-2023-54162)

Vulnerability from cvelistv5

Published

2025-12-30 12:03

Modified

2025-12-30 12:03

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible memory leak in smb2_lock() argv needs to be free when setup_async_work fails or when the current process is woken up.

References

URL

Tags

	https://git.kernel.org/stable/c/bfe8372ef2dbdce97f13b21d76e2080ddeef5a79
	https://git.kernel.org/stable/c/6bf555ed8938444466c3d7f3252eb874a518f293
	https://git.kernel.org/stable/c/11d38f8a0c19763e34d2093b5ecb640e012cb2d2
	https://git.kernel.org/stable/c/d3ca9f7aeba793d74361d88a8800b2f205c9236b

Impacted products

Vendor

Product

Version

Version: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9
Version: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9
Version: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9
Version: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9

Version: 5.15

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/ksmbd/smb2pdu.c",
            "fs/ksmbd/vfs_cache.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "bfe8372ef2dbdce97f13b21d76e2080ddeef5a79",
              "status": "affected",
              "version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9",
              "versionType": "git"
            },
            {
              "lessThan": "6bf555ed8938444466c3d7f3252eb874a518f293",
              "status": "affected",
              "version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9",
              "versionType": "git"
            },
            {
              "lessThan": "11d38f8a0c19763e34d2093b5ecb640e012cb2d2",
              "status": "affected",
              "version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9",
              "versionType": "git"
            },
            {
              "lessThan": "d3ca9f7aeba793d74361d88a8800b2f205c9236b",
              "status": "affected",
              "version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/ksmbd/smb2pdu.c",
            "fs/ksmbd/vfs_cache.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.15"
            },
            {
              "lessThan": "5.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.145",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.16",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2.3",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix possible memory leak in smb2_lock()\n\nargv needs to be free when setup_async_work fails or when the current\nprocess is woken up."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-30T12:03:23.583Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/bfe8372ef2dbdce97f13b21d76e2080ddeef5a79"
        },
        {
          "url": "https://git.kernel.org/stable/c/6bf555ed8938444466c3d7f3252eb874a518f293"
        },
        {
          "url": "https://git.kernel.org/stable/c/11d38f8a0c19763e34d2093b5ecb640e012cb2d2"
        },
        {
          "url": "https://git.kernel.org/stable/c/d3ca9f7aeba793d74361d88a8800b2f205c9236b"
        }
      ],
      "title": "ksmbd: fix possible memory leak in smb2_lock()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-54162",
    "datePublished": "2025-12-30T12:03:23.583Z",
    "dateReserved": "2025-12-24T13:02:52.531Z",
    "dateUpdated": "2025-12-30T12:03:23.583Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.