PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2023-54162

CVE-2023-54162

kernel: ksmbd: Denial of Service via memory leak in smb2_lock()

Loading…

Severity

Important

Red Hat Product Security

8.8

CVSS 3.1

Review impact separately from score.

Published · December 30, 2025

Updated · August 21, 2026

Description

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. This vulnerability involves a possible memory leak within the smb2_lock() function. The memory allocated for argv is not properly freed if the setup_async_work operation fails or if the current process is woken up. This oversight could allow a local attacker to cause a denial of service (DoS) by exhausting system memory.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-772 · Missing Release of Resource after Effective Lifetime