CVE-2023-54260: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-54260 is a resource leak vulnerability in the Linux kernel's CIFS (Common Internet File System) subsystem, specifically in the SMB Direct (SMBD) connection handling code. When a Memory Region (MR) allocation fails during SMB Direct connection setup, the smbd_destroy() function returns early because the connection info pointer is NULL, causing the connection info structure to be leaked without being properly freed. The vulnerability affects Linux kernel versions from 4.16 onward, with fixes backported to stable releases including 4.19.276, 5.4.235, 5.10.173, 5.15.99, 6.1.16, 6.2.3, and 6.3. It was published on December 30, 2025, and carries an estimated CVSS severity of Medium (Feedly, ENISA EUVD).

The root cause is a missing null-check and improper error-path handling in the CIFS SMB Direct connection initialization code (CWE-401: Missing Release of Memory after Effective Lifetime). When smbd_alloc_mr() fails, the smbd_conn pointer passed to smbd_destroy() is NULL, causing the function to return immediately without releasing associated resources. The fix ensures the SMB Direct connection info pointer is assigned to the server structure before smbd_destroy() is called, so cleanup proceeds correctly even on the failure path. The vulnerability is local in nature and requires the system to be configured to use SMB Direct (RDMA-based SMB) connections (Feedly, ENISA EUVD).

The primary impact is a kernel memory leak: when MR allocation fails during SMB Direct connection setup, the connection info structure is not freed, gradually consuming kernel memory over repeated failed connection attempts. This could degrade system availability over time through resource exhaustion, particularly on systems that frequently attempt SMB Direct connections under adverse network or resource conditions. There is no known confidentiality or integrity impact, and the vulnerability does not enable privilege escalation or remote code execution (Feedly).

The Linux kernel maintainers have released patches across multiple stable branches. Users should update to the following fixed versions or later: 4.19.276, 5.4.235, 5.10.173, 5.15.99, 6.1.16, 6.2.3, or 6.3. Linux distribution vendors (e.g., Red Hat, Ubuntu, SUSE) are expected to backport these fixes into their respective kernel packages. As a workaround, disabling SMB Direct (RDMA) support in the CIFS module configuration can prevent the vulnerable code path from being triggered (ENISA EUVD, Feedly).