What’s Vulnerable › Vulnerabilities

CVE-2023-54188: dmaengine: apple-admac: Fix 'current_tx' not getting freed

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: apple-admac: Fix 'current_tx' not getting freed In terminate_all we should queue up all submitted descriptors to be freed. We do that for the content of the 'issued' and 'submitted' lists, but the 'current_tx' descriptor falls through the cracks as it's removed from the 'issued' list once it gets assigned to be the current descriptor. Explicitly queue up freeing of the 'current_tx' descriptor to address a memory leak that is otherwise present.

Affected products

• Linux kernel: 6.0 — fixed in 6.3

How to fix

Upgrade to a fixed version: Linux kernel 6.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/b7abd535881a48587961c2099b1d2933ebd42c4b
• https://git.kernel.org/stable/c/d9503be5a100c553731c0e8a82c7b4201e8a970c
• https://git.kernel.org/stable/c/fd4d88e68c75caf5c6f8293a36bc3ae289e0369e

Get alerted when CVE-2023-54188 or the next vulnerability affects your stack