What’s Vulnerable › Vulnerabilities

CVE-2023-54133: nfp: clean mc addresses in application firmware when closing port

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-24 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: nfp: clean mc addresses in application firmware when closing port When moving devices from one namespace to another, mc addresses are cleaned in software while not removed from application firmware. Thus the mc addresses are remained and will cause resource leak. Now use `__dev_mc_unsync` to clean mc addresses when closing port.

Affected products

• Linux kernel: 6.2 — fixed in 6.5

How to fix

Upgrade to a fixed version: Linux kernel 6.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/c427221733d49fd1e1b79b4a86746acf3ef660e7
• https://git.kernel.org/stable/c/cc7eab25b1cf3f9594fe61142d3523ce4d14a788

Get alerted when CVE-2023-54133 or the next vulnerability affects your stack