What’s Vulnerable › Vulnerabilities

CVE-2023-54106: net/mlx5: fix potential memory leak in mlx5e_init_rep_rx

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-24 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fix potential memory leak in mlx5e_init_rep_rx The memory pointed to by the priv->rx_res pointer is not freed in the error path of mlx5e_init_rep_rx, which can lead to a memory leak. Fix by freeing the memory in the error path, thereby making the error path identical to mlx5e_cleanup_rep_rx().

Affected products

• Linux kernel: 6.0 — fixed in 6.5

How to fix

Upgrade to a fixed version: Linux kernel 6.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0582a3caaa3e2f7b80bcb113ad3c910eac15a63e
• https://git.kernel.org/stable/c/c265d8c2e25546a6b7ee16d36f2bb79b6160c2c3
• https://git.kernel.org/stable/c/c6cf0b6097bf1bf1b2a89b521e9ecd26b581a93a

Get alerted when CVE-2023-54106 or the next vulnerability affects your stack