CVE-2023-54041
io_uring: fix memory leak when removing provided buffers
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix memory leak when removing provided buffers When removing provided buffers, io_buffer structs are not being disposed of, leading to a memory leak. They can't be freed individually, because they are allocated in page-sized groups. They need to be added to some free list instead, such as io_buffers_cache. All callers already hold the lock protecting it, apart from when destroying buffers, so had to extend the lock there.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.19% · top 91% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected cc3cec8367cba76a8ae4c271eba8450f3efc1ba3 – < ac48787f58d1068f4e06d627c1135784d64b4c72
- affected cc3cec8367cba76a8ae4c271eba8450f3efc1ba3 – < c117c15927772d1624c29c092b6bd3f47c7faa48
- affected cc3cec8367cba76a8ae4c271eba8450f3efc1ba3 – < b4a72c0589fdea6259720375426179888969d6a2
- affected 5.18
- unaffected < 5.18
- unaffected 6.1.24 – ≤ 6.1.*
- unaffected 6.2.11 – ≤ 6.2.*
- unaffected 6.3 – ≤ *
References (3)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-54041)Record last updated .