CVE-2023-54169: net/mlx5e: fix memory leak in mlx5e_ptp_open

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix memory leak in mlx5e_ptp_open When kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory pointed by "c" or "cparams" is not freed, which can lead to a memory leak. Fix by freeing the array in the error path.

Affected products

Linux kernel: 5.11 — fixed in 6.5

How to fix

Upgrade to a fixed version: Linux kernel 6.5. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/4892e1e548b5bd6524c1c89df06e4849df26fc20
https://git.kernel.org/stable/c/7035e3ae600c4e9cb3dc220c24dd77112ddff8b1
https://git.kernel.org/stable/c/83a8f7337a14cdb215c76a8f4cf3f3be8b59177d
https://git.kernel.org/stable/c/d543b649ffe58a0cb4b6948b3305069c5980a1fa

Get alerted when CVE-2023-54169 or the next vulnerability affects your stack