CVE-2023-54260

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's CIFS implementation where a Server Message Block (SMB) direct connection's information could be leaked if memory allocation (MR allocate) failed. Specifically, if the MR allocate operation fails, the SMB direct connection information becomes NULL, and the smbd destroy() function returns prematurely, resulting in a memory leak of the connection information. The issue is addressed by setting the SMB direct connection information to the server before calling smbd destroy().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.