Not yet scoredPublished Dec 30, 2025

CVE-2023-54260cifs: Fix lost destroy smbd connection when MR allocate failed

Updated under an hour ago (Oct 28, 2026, 2:23 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbd_destroy() will directly return, then the connection info will be leaked. Let's set the smb direct connection info to the server before call smbd_destroy().

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from c7398583340a6d82b8bb7f7f21edcde27dc6a898 before d303e25887127364a6765eaf7ac68aa2bac518a9; from c7398583340a6d82b8bb7f7f21edcde27dc6a898 before 324c0c34fff1affd436e509325cb46739209704e; from c7398583340a6d82b8bb7f7f21edcde27dc6a898 before caac205e0d5b44c4c23a10c6c0976d50ebe16ac2; from c7398583340a6d82b8bb7f7f21edcde27dc6a898 before 46cd6c639cddba2bd2d810ceb16bb20374ad75b0; from c7398583340a6d82b8bb7f7f21edcde27dc6a898 before c51ae01104b318bf15f3c5097faba5c72addba7a; from c7398583340a6d82b8bb7f7f21edcde27dc6a898 before 04b7e13b8a13264282f874db5378fc3d3253cfac; from c7398583340a6d82b8bb7f7f21edcde27dc6a898 before e9d3401d95d62a9531082cd2453ed42f2740e3fd	CNA record

References

References

https://git.kernel.org/stable/c/d303e25887127364a6765eaf7ac68aa2bac518a9
https://git.kernel.org/stable/c/324c0c34fff1affd436e509325cb46739209704e
https://git.kernel.org/stable/c/caac205e0d5b44c4c23a10c6c0976d50ebe16ac2
https://git.kernel.org/stable/c/46cd6c639cddba2bd2d810ceb16bb20374ad75b0
https://git.kernel.org/stable/c/c51ae01104b318bf15f3c5097faba5c72addba7a
https://git.kernel.org/stable/c/04b7e13b8a13264282f874db5378fc3d3253cfac
https://git.kernel.org/stable/c/e9d3401d95d62a9531082cd2453ed42f2740e3fd

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.