CVE-2023-54169

In the Linux kernel, a memory leak vulnerability exists in the mlx5e_ptp_open function within the mlx5e network driver. When memory allocation via kvzalloc_node or kvzalloc fails, the previously allocated memory pointed to by "c" or "cparams" is not freed, leading to a memory leak [1][2].

The vulnerability can be triggered by a local user or system process that causes the mlx5e_ptp_open function to be invoked under conditions where memory allocation fails. This requires the ability to interact with the network driver, typically through privileged operations or specific system configurations.

The impact is a gradual memory leak, which can lead to system resource exhaustion and potential denial of service over time. An attacker with local access could exploit this to degrade system performance or cause instability.

The fix, which frees the allocated memory in the error path, has been applied to the Linux kernel stable branches. Users are advised to update to the latest kernel versions to mitigate this vulnerability.