What’s Vulnerable › Vulnerabilities

CVE-2023-53546: net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-04 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx when mlx5_cmd_exec failed in mlx5dr_cmd_create_reformat_ctx, the memory pointed by 'in' is not released, which will cause memory leak. Move memory release after mlx5_cmd_exec.

Affected products

• Linux kernel: from 5.4 before 5.4.253; from 5.5 before 5.10.190; from 5.11 before 5.15.126; from 5.16 before 6.1.45; from 6.2 before 6.4.10; 6.5-rc1, 6.5-rc2, 6.5-rc3, 6.5-rc4 — fixed in 5.10.190, 5.15.126, 5.4.253, 6.1.45, 6.4.10

How to fix

Upgrade to a fixed version: Linux kernel 5.10.190, 5.15.126, 5.4.253, 6.1.45. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/00cecb0a8f9e7a21754d5ad85813ab6b47b3308f
• https://git.kernel.org/stable/c/165159854757dbae0dfd1812b27051da35aa6223
• https://git.kernel.org/stable/c/3169c3854397f3070a63b1b772db16dcb8cba7b4
• https://git.kernel.org/stable/c/5dd77585dd9d0e03dd1bceb95f0269a7eaf6b936
• https://git.kernel.org/stable/c/622d71d99124e69f7bf2e2b7a89f5f444a24d235
• https://git.kernel.org/stable/c/800d8c96bf997da5eb76ccf8d88795c4231c83fb

Get alerted when CVE-2023-53546 or the next vulnerability affects your stack