CVE-2023-53371

net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create

Medium5.5EPSS 0.16%

Published: 18 Sept 2025
Updated: 11 May 2026
Reserved: 17 Sept 2025
Assigned by: Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create The memory pointed to by the fs->any pointer is not freed in the error path of mlx5e_fs_tt_redirect_any_create, which can lead to a memory leak. Fix by freeing the memory in the error path, thereby making the error path identical to mlx5e_fs_tt_redirect_any_destroy().

Scores

CVSS scores of CVE-2023-53371, by who scored it
Scored by	CVSS	Score	Vector
CISA-ADPADP (enrichment)	3.1	Medium5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVDNVD · Modified	3.1	Medium5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 0.16% · top 95% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

CWE-401 Missing Release of Memory after Effective Lifetime (opens in a new tab)All about CWE-401 and its CVEs

Affected products

Linux · Linux
- affected 0f575c20bf0686caf3d82d6c626c2e1e4a4c36e6 – < 75df2fe6d160e16be880aacacd521b135d7177c9
- affected 0f575c20bf0686caf3d82d6c626c2e1e4a4c36e6 – < 8a75a6f169c3df3a94802314aa61282772ac75b8
- affected 0f575c20bf0686caf3d82d6c626c2e1e4a4c36e6 – < 3250affdc658557a41df9c5fb567723e421f8bf2
Linux · Linux
- affected 5.13
- unaffected < 5.13
- unaffected 6.1.40 – ≤ 6.1.*
- unaffected 6.4.5 – ≤ 6.4.*
- unaffected 6.5 – ≤ *

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2023-53371](https://trackcve.app/badge/CVE-2023-53371.svg)](https://trackcve.app/cve/CVE-2023-53371)

Record last updated 11 May 2026, 19:43 UTC.