What’s Vulnerable › Vulnerabilities

CVE-2023-54162: ksmbd: fix possible memory leak in smb2_lock()

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible memory leak in smb2_lock() argv needs to be free when setup_async_work fails or when the current process is woken up.

Affected products

• Linux kernel: 5.15 — fixed in 6.3

How to fix

Upgrade to a fixed version: Linux kernel 6.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/11d38f8a0c19763e34d2093b5ecb640e012cb2d2
• https://git.kernel.org/stable/c/6bf555ed8938444466c3d7f3252eb874a518f293
• https://git.kernel.org/stable/c/bfe8372ef2dbdce97f13b21d76e2080ddeef5a79
• https://git.kernel.org/stable/c/d3ca9f7aeba793d74361d88a8800b2f205c9236b

Get alerted when CVE-2023-54162 or the next vulnerability affects your stack