CVE-2023-54260
kernel: cifs: Fix lost destroy smbd connection when MR allocate failed
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 30, 2025
Updated · June 30, 2026
Description
A memory leak flaw was found in the Linux kernel's CIFS SMB Direct implementation. When memory region (MR) allocation fails during SMB Direct connection setup, the smbd_destroy() function returns early without cleaning up the connection info structure, resulting in a memory leak.
Statement
This leak occurs only during SMB Direct connection failures, specifically when RDMA memory region allocation fails. Systems not using SMB Direct (RDMA-based CIFS) are unaffected. The leaked memory is per-failed-connection and does not accumulate during normal operation.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-772 · Missing Release of Resource after Effective Lifetime