CVE-2023-54209

Not scored yetLast modified Oct 28, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

block: fix blktrace debugfs entries leakage

Commit 99d055b4fd4b ("block: remove per-disk debugfs files in blk_unregister_queue") moves blk_trace_shutdown() from blk_release_queue() to blk_unregister_queue(), this is safe if blktrace is created through sysfs, however, there is a regression in corner case.

blktrace can still be enabled after del_gendisk() through ioctl if the disk is opened before del_gendisk(), and if blktrace is not shutdown through ioctl before closing the disk, debugfs entries will be leaked.

Fix this problem by shutdown blktrace in disk_release(), this is safe because blk_trace_remove() is reentrant.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 99d055b4fd4bbb309c6cdb51a0d420669f777944, < aa07e56c6a9c7558165690d14eed4fe8babf34fb; >= 99d055b4fd4bbb309c6cdb51a0d420669f777944, < 7149e57cf01184fba175589f8fbe9fbf33be02e1; >= 99d055b4fd4bbb309c6cdb51a0d420669f777944, < 942e81650b81b4ca62f1d8c61de455c9e7c7e6ca; >= 99d055b4fd4bbb309c6cdb51a0d420669f777944, < dd7de3704af9989b780693d51eaea49a665bd9c2
LinuxLinux5.19

References

Timeline

Published
Dec 30, 2025
Last modified
Oct 28, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-54215.5An attacker who is logged into OTRS as an user with privileges to create and change customer user data may manipulate the CustomerID field tCVE-2023-542107.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monCVE-2023-54211In the Linux kernel, the following vulnerability has been resolved: tracing: Fix warning in trace_buffered_event_disable() Warning happeneCVE-2023-54213In the Linux kernel, the following vulnerability has been resolved: USB: sisusbvga: Add endpoint checks The syzbot fuzzer was able to provCVE-2023-542148.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instancCVE-2023-54215In the Linux kernel, the following vulnerability has been resolved: virtio-vdpa: Fix cpumask memory leak in virtio_vdpa_find_vqs() Free thCVE-2023-542167.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix using eswitch mapping in nic mode Cited patch is usCVE-2023-54217In the Linux kernel, the following vulnerability has been resolved: Revert "drm/msm: Add missing check and destroy for alloc_ordered_workquCVE-2023-54218In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). KCSAN founCVE-2023-542197.5In the Linux kernel, the following vulnerability has been resolved: Revert "IB/isert: Fix incorrect release of isert connection" Commit: 6CVE-2023-54229.1The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As CVE-2023-542207.8In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix oops for port->pm on uart_change_pm() Unloading a ha
CVE-2023-54209: Unscored | Vulnix