Not yet scoredPublished Dec 24, 2025

CVE-2023-54003RDMA/core: Fix GID entry ref leak when create_ah fails

Updated under an hour ago (Oct 27, 2026, 6:50 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix GID entry ref leak when create_ah fails If AH create request fails, release sgid_attr to avoid GID entry referrence leak reported while releasing GID table

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1a1f460ff151710289c2f8d4badd8b603b87d610 before 9c46c49ad3ffe84121715d392b5a0a94f9f10669; from 1a1f460ff151710289c2f8d4badd8b603b87d610 before d1b9b3191697a80aca8e247320eba46f24d41d18; from 1a1f460ff151710289c2f8d4badd8b603b87d610 before e97ff11b396c320d2cc025b09741ba432fcb20a2; from 1a1f460ff151710289c2f8d4badd8b603b87d610 before 370280c65c28a515b841c9f2c08524f06182510c; from 1a1f460ff151710289c2f8d4badd8b603b87d610 before 632d6baf8884d803e598bf5164008d23fd9b736c; from 1a1f460ff151710289c2f8d4badd8b603b87d610 before aca3b0fa3d04b40c96934d86cc224cccfa7ea8e0	CNA record

References

References

https://git.kernel.org/stable/c/9c46c49ad3ffe84121715d392b5a0a94f9f10669
https://git.kernel.org/stable/c/d1b9b3191697a80aca8e247320eba46f24d41d18
https://git.kernel.org/stable/c/e97ff11b396c320d2cc025b09741ba432fcb20a2
https://git.kernel.org/stable/c/370280c65c28a515b841c9f2c08524f06182510c
https://git.kernel.org/stable/c/632d6baf8884d803e598bf5164008d23fd9b736c
https://git.kernel.org/stable/c/aca3b0fa3d04b40c96934d86cc224cccfa7ea8e0

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.