Skip to content
Heist/ feed
Back to feed
UnratedFix available

ipmi:ssif: Fix a memory leak when scanning for an adapter

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find() sets info->adapter_name if the adapter info came from SMBIOS, as it's not set in that case. However, this function can be called more than once, and it will leak the adapter name if it had already been set. So check for NULL before setting it.

Products
Kernel
Affected versions
Not specified
Fixed versions
5.10.195, 5.15.132, 5.4.257, 6.1.53, 6.4.16, 6.5.3
CVEs
CVE-2023-54064
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 15:23 UTC · Revision 1

Source evidence

ipmi:ssif: Fix a memory leak when scanning for an adapter

core-osv · Original source

Published 24 Dec 2025, 12:23 UTC

In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find() sets info->adapter_name if the adapter info came from SMBIOS, as it's not set in that case. However, this function can be called more than once, and it will leak the adapter name if it had already been set. So check for NULL before setting it.

osv:CVE-2023-54064

Kernel

Fixed versions: 5.4.257, 5.10.195, 5.15.132, 6.1.53, 6.4.16, 6.5.3

Complete source record
{
  "id": "9393061ba5222d3c522fe9ba908541cda585c7080b7fa86f50d9ae0ff1211035",
  "url": "https://osv.dev/vulnerability/CVE-2023-54064",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "ipmi:ssif: Fix a memory leak when scanning for an adapter",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find() sets info->adapter_name if the adapter info came from SMBIOS, as it's not set in that case. However, this function can be called more than once, and it will leak the adapter name if it had already been set. So check for NULL before setting it.",
    "evidence": "osv:CVE-2023-54064",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.257",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.10.195",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.15.132",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.1.53",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.4.16",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.5.3",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2023-54064",
      "aliases": [
        "CVE-2023-54064"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "c4436c9149c5d2bc0c49ab57ec85c75ea1c4d61c"
                },
                {
                  "fixed": "de677f4379fa67f650e367c188a0f80bee9b6732"
                },
                {
                  "fixed": "13623b966bb6d36ba61646b69cd49cdac6e4978a"
                },
                {
                  "fixed": "3ad53071fe8547eb8d8813971844cc43246008ee"
                },
                {
                  "fixed": "74a1194cce60a90723d0fe148863c18931a31153"
                },
                {
                  "fixed": "7db16d2e791bf2ec3e0249f56b7ec81c35bba6e6"
                },
                {
                  "fixed": "b870caeb18041f856893066ded81c560db3d56cc"
                },
                {
                  "fixed": "b8d72e32e1453d37ee5c8a219f24e7eeadc471ef"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54064.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.4.0"
                },
                {
                  "fixed": "5.4.257"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.5.0"
                },
                {
                  "fixed": "5.10.195"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.11.0"
                },
                {
                  "fixed": "5.15.132"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "6.1.53"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.4.16"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.5.0"
                },
                {
                  "fixed": "6.5.3"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54064.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:29.733544771Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/13623b966bb6d36ba61646b69cd49cdac6e4978a",
        "https://git.kernel.org/stable/c/3ad53071fe8547eb8d8813971844cc43246008ee",
        "https://git.kernel.org/stable/c/74a1194cce60a90723d0fe148863c18931a31153",
        "https://git.kernel.org/stable/c/7db16d2e791bf2ec3e0249f56b7ec81c35bba6e6",
        "https://git.kernel.org/stable/c/b870caeb18041f856893066ded81c560db3d56cc",
        "https://git.kernel.org/stable/c/b8d72e32e1453d37ee5c8a219f24e7eeadc471ef",
        "https://git.kernel.org/stable/c/de677f4379fa67f650e367c188a0f80bee9b6732",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54064.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-54064",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54064.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2023-54064",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 496784,
  "published_at": "2025-12-24T12:23:10.051+00:00"
}