github - ghsa-w746-97c4-584x

ghsa-w746-97c4-584x

Vulnerability from github

Published

2025-12-30 15:30

Modified

2025-12-30 15:30

Details

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: fix memory leak in mlx5e_ptp_open

When kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory pointed by "c" or "cparams" is not freed, which can lead to a memory leak. Fix by freeing the array in the error path.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-54169"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-12-30T13:16:04Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: fix memory leak in mlx5e_ptp_open\n\nWhen kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory\npointed by \"c\" or \"cparams\" is not freed, which can lead to a memory\nleak. Fix by freeing the array in the error path.",
  "id": "GHSA-w746-97c4-584x",
  "modified": "2025-12-30T15:30:30Z",
  "published": "2025-12-30T15:30:30Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-54169"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/4892e1e548b5bd6524c1c89df06e4849df26fc20"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7035e3ae600c4e9cb3dc220c24dd77112ddff8b1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/83a8f7337a14cdb215c76a8f4cf3f3be8b59177d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d543b649ffe58a0cb4b6948b3305069c5980a1fa"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2023-54169 (GCVE-0-2023-54169)

Vulnerability from cvelistv5

Published

2025-12-30 12:08

Modified

2025-12-30 12:08

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix memory leak in mlx5e_ptp_open When kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory pointed by "c" or "cparams" is not freed, which can lead to a memory leak. Fix by freeing the array in the error path.

References

URL

Tags

	https://git.kernel.org/stable/c/4892e1e548b5bd6524c1c89df06e4849df26fc20
	https://git.kernel.org/stable/c/83a8f7337a14cdb215c76a8f4cf3f3be8b59177d
	https://git.kernel.org/stable/c/7035e3ae600c4e9cb3dc220c24dd77112ddff8b1
	https://git.kernel.org/stable/c/d543b649ffe58a0cb4b6948b3305069c5980a1fa

Impacted products

Vendor

Product

Version

Version: 145e5637d941daec2e8d1ff21676cbf1aa62cf4d
Version: 145e5637d941daec2e8d1ff21676cbf1aa62cf4d
Version: 145e5637d941daec2e8d1ff21676cbf1aa62cf4d
Version: 145e5637d941daec2e8d1ff21676cbf1aa62cf4d

Version: 5.11

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4892e1e548b5bd6524c1c89df06e4849df26fc20",
              "status": "affected",
              "version": "145e5637d941daec2e8d1ff21676cbf1aa62cf4d",
              "versionType": "git"
            },
            {
              "lessThan": "83a8f7337a14cdb215c76a8f4cf3f3be8b59177d",
              "status": "affected",
              "version": "145e5637d941daec2e8d1ff21676cbf1aa62cf4d",
              "versionType": "git"
            },
            {
              "lessThan": "7035e3ae600c4e9cb3dc220c24dd77112ddff8b1",
              "status": "affected",
              "version": "145e5637d941daec2e8d1ff21676cbf1aa62cf4d",
              "versionType": "git"
            },
            {
              "lessThan": "d543b649ffe58a0cb4b6948b3305069c5980a1fa",
              "status": "affected",
              "version": "145e5637d941daec2e8d1ff21676cbf1aa62cf4d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.11"
            },
            {
              "lessThan": "5.11",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.121",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.121",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.40",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.5",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: fix memory leak in mlx5e_ptp_open\n\nWhen kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory\npointed by \"c\" or \"cparams\" is not freed, which can lead to a memory\nleak. Fix by freeing the array in the error path."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-30T12:08:44.089Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/4892e1e548b5bd6524c1c89df06e4849df26fc20"
        },
        {
          "url": "https://git.kernel.org/stable/c/83a8f7337a14cdb215c76a8f4cf3f3be8b59177d"
        },
        {
          "url": "https://git.kernel.org/stable/c/7035e3ae600c4e9cb3dc220c24dd77112ddff8b1"
        },
        {
          "url": "https://git.kernel.org/stable/c/d543b649ffe58a0cb4b6948b3305069c5980a1fa"
        }
      ],
      "title": "net/mlx5e: fix memory leak in mlx5e_ptp_open",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-54169",
    "datePublished": "2025-12-30T12:08:44.089Z",
    "dateReserved": "2025-12-30T12:06:44.496Z",
    "dateUpdated": "2025-12-30T12:08:44.089Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.