What’s Vulnerable › Vulnerabilities

CVE-2023-53330: caif: fix memory leak in cfctrl_linkup_request()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-16 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: caif: fix memory leak in cfctrl_linkup_request() When linktype is unknown or kzalloc failed in cfctrl_linkup_request(), pkt is not released. Add release process to error path.

Affected products

• Linux kernel: from 2.6.35 before 4.14.303; from 4.15 before 4.19.270; from 4.20 before 5.4.229; from 5.5 before 5.10.163; from 5.11 before 5.15.87; from 5.16 before 6.0.19 — fixed in 4.14.303, 4.19.270, 5.10.163, 5.15.87, 5.4.229, 6.0.19

How to fix

Upgrade to a fixed version: Linux kernel 4.14.303, 4.19.270, 5.10.163, 5.15.87. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1dddeceb26002cfea4c375e92ac6498768dc7349
• https://git.kernel.org/stable/c/33df9c5d5e2a18c70f5f5f3c2757d654c1b6ffa3
• https://git.kernel.org/stable/c/3acf3783a84cbdf0c9f8cf2f32ee9c49af93a2da
• https://git.kernel.org/stable/c/3ad47c8aa5648226184415e4a0cb1bf67ffbfd48
• https://git.kernel.org/stable/c/84b2cc7b36b7f6957d307fb3d01603f93cb2d655
• https://git.kernel.org/stable/c/badea57569db04b010e922e29a7aaf40a979a70b
• https://git.kernel.org/stable/c/dc1bc903970bdf63ca40ab923d3ccb765da9a8d9
• https://git.kernel.org/stable/c/fe69230f05897b3de758427b574fc98025dfc907

Get alerted when CVE-2023-53330 or the next vulnerability affects your stack