CVE-2023-54041
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix memory leak when removing provided buffers When removing provided buffers, io_buffer structs are not being disposed of, leading to a memory leak. They can't be freed individually, because they are allocated in page-sized groups. They need to be added to some free list instead, such as io_buffers_cache. All callers already hold the lock protecting it, apart from when destroying buffers, so had to extend the lock there.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linuxac48787f58d1068f4e06d627c1135784d64b4c72, c117c15927772d1624c29c092b6bd3f47c7faa48, b4a72c0589fdea6259720375426179888969d6a2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | cc3cec8367cba76a8ae4c271eba8450f3efc1ba3 ≤ v < ac48787f58d1068f4e06d627c1135784d64b4c72, cc3cec8367cba76a8ae4c271eba8450f3efc1ba3 ≤ v < c117c15927772d1624c29c092b6bd3f47c7faa48, cc3cec8367cba76a8ae4c271eba8450f3efc1ba3 ≤ v < b4a72c0589fdea6259720375426179888969d6a2, 5.18 | ac48787f58d1068f4e06d627c1135784d64b4c72, c117c15927772d1624c29c092b6bd3f47c7faa48, b4a72c0589fdea6259720375426179888969d6a2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.