What’s Vulnerable › Vulnerabilities

CVE-2023-53371: net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-18 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create The memory pointed to by the fs->any pointer is not freed in the error path of mlx5e_fs_tt_redirect_any_create, which can lead to a memory leak. Fix by freeing the memory in the error path, thereby making the error path identical to mlx5e_fs_tt_redirect_any_destroy().

Affected products

• Linux kernel: from 5.13 before 6.1.40; from 6.2 before 6.4.5; 6.5-rc1 — fixed in 6.1.40, 6.4.5

How to fix

Upgrade to a fixed version: Linux kernel 6.1.40, 6.4.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3250affdc658557a41df9c5fb567723e421f8bf2
• https://git.kernel.org/stable/c/75df2fe6d160e16be880aacacd521b135d7177c9
• https://git.kernel.org/stable/c/8a75a6f169c3df3a94802314aa61282772ac75b8

Get alerted when CVE-2023-53371 or the next vulnerability affects your stack