CVE-2023-53720

{
  "id": "CVE-2023-53720",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2025-10-22T14:15:46.700",
  "lastModified": "2026-10-28T19:10:00.193",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Release the label when replacing existing ct entry\n\nCited commit doesn't release the label mapping when replacing existing ct\nentry which leads to following memleak report:\n\nunreferenced object 0xffff8881854cf280 (size 96):\n  comm \"kworker/u48:74\", pid 23093, jiffies 4296664564 (age 175.944s)\n  hex dump (first 32 bytes):\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n  backtrace:\n    [<000000002722d368>] __kmalloc+0x4b/0x1c0\n    [<00000000cc44e18f>] mapping_add+0x6e8/0xc90 [mlx5_core]\n    [<000000003ad942a7>] mlx5_get_label_mapping+0x66/0xe0 [mlx5_core]\n    [<00000000266308ac>] mlx5_tc_ct_entry_create_mod_hdr+0x1c4/0xf50 [mlx5_core]\n    [<000000009a768b4f>] mlx5_tc_ct_entry_add_rule+0x16f/0xaf0 [mlx5_core]\n    [<00000000a178f3e5>] mlx5_tc_ct_block_flow_offload_add+0x10cb/0x1f90 [mlx5_core]\n    [<000000007b46c496>] mlx5_tc_ct_block_flow_offload+0x14a/0x630 [mlx5_core]\n    [<00000000a9a18ac5>] nf_flow_offload_tuple+0x1a3/0x390 [nf_flow_table]\n    [<00000000d0881951>] flow_offload_work_handler+0x257/0xd30 [nf_flow_table]\n    [<000000009e4935a4>] process_one_work+0x7c2/0x13e0\n    [<00000000f5cd36a7>] worker_thread+0x59d/0xec0\n    [<00000000baed1daf>] kthread+0x28f/0x330\n    [<0000000063d282a4>] ret_from_fork+0x1f/0x30\n\nFix the issue by correctly releasing the label mapping."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet/mlx5e: Liberar la etiqueta al reemplazar una entrada ct existente\n\nEl commit citado no libera el mapeo de etiquetas al reemplazar una entrada ct existente, lo que lleva al siguiente informe de fuga de memoria:\n\nobjeto sin referencia 0xffff8881854cf280 (tamaño 96):\n  comm “kworker/u48:74”, pid 23093, jiffies 4296664564 (antigüedad 175.944s)\n  volcado hexadecimal (primeros 32 bytes):\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n  rastreo de pila:\n    [[000000002722d368]] __kmalloc+0x4b/0x1c0\n    [[00000000cc44e18f]] mapping_add+0x6e8/0xc90 [mlx5_core]\n    [[000000003ad942a7]] mlx5_get_label_mapping+0x66/0xe0 [mlx5_core]\n    [[00000000266308ac]] mlx5_tc_ct_entry_create_mod_hdr+0x1c4/0xf50 [mlx5_core]\n    [[000000009a768b4f]] mlx5_tc_ct_entry_add_rule+0x16f/0xaf0 [mlx5_core]\n    [[00000000a178f3e5]] mlx5_tc_ct_block_flow_offload_add+0x10cb/0x1f90 [mlx5_core]\n    [[000000007b46c496]] mlx5_tc_ct_block_flow_offload+0x14a/0x630 [mlx5_core]\n    [[00000000a9a18ac5]] nf_flow_offload_tuple+0x1a3/0x390 [nf_flow_table]\n    [[00000000d0881951]] flow_offload_work_handler+0x257/0xd30 [nf_flow_table]\n    [[000000009e4935a4]] process_one_work+0x7c2/0x13e0\n    [[00000000f5cd36a7]] worker_thread+0x59d/0xec0\n    [[00000000baed1daf]] kthread+0x28f/0x330\n    [[0000000063d282a4]] ret_from_fork+0x1f/0x30\n\nCorregir el problema liberando correctamente el mapeo de etiquetas."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "94ceffb48eac7692677d8093dcde6965b70c4b35",
              "lessThan": "3db903a71f1f4bbf30baae166a4a49f2e8aceb61",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "94ceffb48eac7692677d8093dcde6965b70c4b35",
              "lessThan": "8ac04a28144cfa89b61be518268233742c23d88d",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.3",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.3",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.3.2",
              "lessThanOrEqual": "6.3.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.4",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/3db903a71f1f4bbf30baae166a4a49f2e8aceb61",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8ac04a28144cfa89b61be518268233742c23d88d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}