CVE-2023-54260: cifs: Fix lost destroy smbd connection when MR allocate failed
Vulnerability summary
CVE-2023-54260 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10.5% of scored vulnerabilities.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 5Timeline
- 30-12-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbd_destroy() will directly return, then the connection info will be leaked. Let's set the smb direct connection info to the server before call smbd_destroy().
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.21%
Chance of exploitation in the next 30 days
Percentile
11%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.21% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Ubuntu118 products
- linux< 5.4.0-152.169 | < 5.15.0-75.82
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.4.0-1104.112 | < 5.15.0-1038.43
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.20-1
Linux1 product
- linux≥ c7398583340a6d82b8bb7f7f21edcde27dc6a898, < d303e25887127364a6765eaf7ac68aa2bac518a9 | ≥ c7398583340a6d82b8bb7f7f21edcde27dc6a898, < 324c0c34fff1affd436e509325cb46739209704e | ≥ c7398583340a6d82b8bb7f7f21edcde27dc6a898, < caac205e0d5b44c4c23a10c6c0976d50ebe16ac2 | ≥ c7398583340a6d82b8bb7f7f21edcde27dc6a898, < 46cd6c639cddba2bd2d810ceb16bb20374ad75b0 | ≥ c7398583340a6d82b8bb7f7f21edcde27dc6a898, < c51ae01104b318bf15f3c5097faba5c72addba7a | ≥ c7398583340a6d82b8bb7f7f21edcde27dc6a898, < 04b7e13b8a13264282f874db5378fc3d3253cfac | ≥ c7398583340a6d82b8bb7f7f21edcde27dc6a898, < e9d3401d95d62a9531082cd2453ed42f2740e3fd | 4.16
3 vendors · 120 products
