CVE-2023-53061

ksmbd: fix possible refcount leak in smb2_open()

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible refcount leak in smb2_open() Reference count of acls will leak when memory allocation fails. Fix this by adding the missing posix_acl_release().

N/A

CVSS

Severity:

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/c33344b7972225b232966f95d31f6312dcc6273d
https://git.kernel.org/stable/c/303f8e58cc3ace744801dcdcabfc06ffc72ed62d
https://git.kernel.org/stable/c/a22c49a05e5e7aa2c414fbc42c49c4c01a5c9a78
https://git.kernel.org/stable/c/2624b445544ffc1472ccabfb6ec867c199d4c95c

Frequently Asked Questions

What is the severity of CVE-2023-53061?: CVE-2023-53061 has not yet been assigned a CVSS score.
How to fix CVE-2023-53061?: To fix CVE-2023-53061, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-53061 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2023-53061 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-53061?: CVE-2023-53061 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.