{"cve":"CVE-2023-54260","nvd":{"published":"2025-12-30T13:16:14.777","modified":"2026-06-17T06:47:06.733","status":"Deferred","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: Fix lost destroy smbd connection when MR allocate failed\n\nIf the MR allocate failed, the smb direct connection info is NULL,\nthen smbd_destroy() will directly return, then the connection info\nwill be leaked.\n\nLet's set the smb direct connection info to the server before call\nsmbd_destroy().","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/04b7e13b8a13264282f874db5378fc3d3253cfac","https://git.kernel.org/stable/c/324c0c34fff1affd436e509325cb46739209704e","https://git.kernel.org/stable/c/46cd6c639cddba2bd2d810ceb16bb20374ad75b0","https://git.kernel.org/stable/c/c51ae01104b318bf15f3c5097faba5c72addba7a","https://git.kernel.org/stable/c/caac205e0d5b44c4c23a10c6c0976d50ebe16ac2"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:18:08.089039631+00:00"},"epss":{"cve":"CVE-2023-54260","score":0.00205,"percentile":0.10496,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}