{"id":"DEBIAN-CVE-2023-54024","details":"In the Linux kernel, the following vulnerability has been resolved:  KVM: Destroy target device if coalesced MMIO unregistration fails  Destroy and free the target coalesced MMIO device if unregistering said device fails.  As clearly noted in the code, kvm_io_bus_unregister_dev() does not destroy the target device.    BUG: memory leak   unreferenced object 0xffff888112a54880 (size 64):     comm \"syz-executor.2\", pid 5258, jiffies 4297861402 (age 14.129s)     hex dump (first 32 bytes):       38 c7 67 15 00 c9 ff ff 38 c7 67 15 00 c9 ff ff  8.g.....8.g.....       e0 c7 e1 83 ff ff ff ff 00 30 67 15 00 c9 ff ff  .........0g.....     backtrace:       [\u003c0000000006995a8a\u003e] kmalloc include/linux/slab.h:556 [inline]       [\u003c0000000006995a8a\u003e] kzalloc include/linux/slab.h:690 [inline]       [\u003c0000000006995a8a\u003e] kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x3d0 arch/x86/kvm/../../../virt/kvm/coalesced_mmio.c:150       [\u003c00000000022550c2\u003e] kvm_vm_ioctl+0x47d/0x1600 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3323       [\u003c000000008a75102f\u003e] vfs_ioctl fs/ioctl.c:46 [inline]       [\u003c000000008a75102f\u003e] file_ioctl fs/ioctl.c:509 [inline]       [\u003c000000008a75102f\u003e] do_vfs_ioctl+0xbab/0x1160 fs/ioctl.c:696       [\u003c0000000080e3f669\u003e] ksys_ioctl+0x76/0xa0 fs/ioctl.c:713       [\u003c0000000059ef4888\u003e] __do_sys_ioctl fs/ioctl.c:720 [inline]       [\u003c0000000059ef4888\u003e] __se_sys_ioctl fs/ioctl.c:718 [inline]       [\u003c0000000059ef4888\u003e] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:718       [\u003c000000006444fa05\u003e] do_syscall_64+0x9f/0x4e0 arch/x86/entry/common.c:290       [\u003c000000009a4ed50b\u003e] entry_SYSCALL_64_after_hwframe+0x49/0xbe    BUG: leak checking failed","modified":"2026-09-15T08:47:48.234201362Z","published":"2025-12-24T11:15:55.403Z","upstream":["CVE-2023-54024"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-54024"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54024.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54024.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54024.json"}}],"schema_version":"1.9.0"}