Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2023-54024— KVM: Destroy target device if coalesced MMIO unregistration fails

AI Predicted 5.5 Difficulty: Trivial EPSS 0.17% · P7

Possible ATT&CK Techniques 1AI

T1498 · Network Denial of Service

Affected Version Matrix 20

VendorProductVersion RangeStatus
LinuxLinux7d1bc32d6477ff96a32695ea4be8144e4513ab2d< 10c2a20d73e99463e69b7e92706791656adc16d7affected
2a20592baff59c5351c5200ec667e1a2aa22af85< 76a9886e1b61ce5592df5ae78a19ed30399ae189affected
5d3c4c79384af06e3c8e25b7770b6247496b4417< 999439fd5da5a76253e2f2c37b94204f47d75491affected
5d3c4c79384af06e3c8e25b7770b6247496b4417< ccf6a7fb1aedb1472e1241ee55e4d26b68f8d066affected
5d3c4c79384af06e3c8e25b7770b6247496b4417< fb436dd6914325075f07d19851ab277b7a693ae7affected
5d3c4c79384af06e3c8e25b7770b6247496b4417< b1cb1fac22abf102ffeb29dd3eeca208a3869d54affected
168e82f640ed1891a700bdb43e37da354b2ab63caffected
50cbad42bfea8c052b7ca590bd4126cdc898713caffected
… +12 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-54024

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
KVM: Destroy target device if coalesced MMIO unregistration fails
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy target device if coalesced MMIO unregistration fails Destroy and free the target coalesced MMIO device if unregistering said device fails. As clearly noted in the code, kvm_io_bus_unregister_dev() does not destroy the target device. BUG: memory leak unreferenced object 0xffff888112a54880 (size 64): comm "syz-executor.2", pid 5258, jiffies 4297861402 (age 14.129s) hex dump (first 32 bytes): 38 c7 67 15 00 c9 ff ff 38 c7 67 15 00 c9 ff ff 8.g.....8.g..... e0 c7 e1 83 ff ff ff ff 00 30 67 15 00 c9 ff ff .........0g..... backtrace: [<0000000006995a8a>] kmalloc include/linux/slab.h:556 [inline] [<0000000006995a8a>] kzalloc include/linux/slab.h:690 [inline] [<0000000006995a8a>] kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x3d0 arch/x86/kvm/../../../virt/kvm/coalesced_mmio.c:150 [<00000000022550c2>] kvm_vm_ioctl+0x47d/0x1600 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3323 [<000000008a75102f>] vfs_ioctl fs/ioctl.c:46 [inline] [<000000008a75102f>] file_ioctl fs/ioctl.c:509 [inline] [<000000008a75102f>] do_vfs_ioctl+0xbab/0x1160 fs/ioctl.c:696 [<0000000080e3f669>] ksys_ioctl+0x76/0xa0 fs/ioctl.c:713 [<0000000059ef4888>] __do_sys_ioctl fs/ioctl.c:720 [inline] [<0000000059ef4888>] __se_sys_ioctl fs/ioctl.c:718 [inline] [<0000000059ef4888>] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:718 [<000000006444fa05>] do_syscall_64+0x9f/0x4e0 arch/x86/entry/common.c:290 [<000000009a4ed50b>] entry_SYSCALL_64_after_hwframe+0x49/0xbe BUG: leak checking failed
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于KVM合并MMIO设备注销失败时未销毁目标设备，可能导致内存泄漏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 7d1bc32d6477ff96a32695ea4be8144e4513ab2d ~ 10c2a20d73e99463e69b7e92706791656adc16d7 -
LinuxLinux 5.13 -

II. Public POCs for CVE-2023-54024

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-54024

请登录查看更多情报信息。

Other References for CVE-2023-54024 (4)

Same Patch Batch · Linux · 2025-12-24 · 322 CVEs total

CVE-2025-687419.8 CRITICALscsi: qla2xxx: Fix improper freeing of purex item
CVE-2023-538679.8 CRITICALceph: fix potential use-after-free bug when trimming caps
CVE-2025-687269.8 CRITICALcrypto: aead - Fix reqsize handling
CVE-2023-540949.8 CRITICALnet: prevent skb corruption on frag list segmentation
CVE-2023-540909.8 CRITICALixgbe: Fix panic during XDP_TX with > 64 CPUs
CVE-2022-507179.8 CRITICALnvmet-tcp: add bounds check on Transfer Tag
CVE-2023-540769.8 CRITICALsmb: client: fix missed ses refcounting
CVE-2025-683599.8 CRITICALbtrfs: fix double free of qgroup record after failure to add delayed ref head
CVE-2025-687459.8 CRITICALscsi: qla2xxx: Clear cmds after chip reset
CVE-2023-539969.3 CRITICALx86/sev: Make enc_dec_hypercall() accept a size instead of npages
CVE-2023-540608.8 HIGHiommufd: Set end correctly when doing batch carry
CVE-2025-687368.8 HIGHlandlock: Fix handling of disconnected directories
CVE-2023-540928.8 HIGHKVM: s390: pv: fix index value of replaced ASCE
CVE-2023-540718.8 HIGHwifi: rtw88: use work to update rate to avoid RCU warning
CVE-2023-540438.8 HIGHiommufd: Do not add the same hwpt to the ioas->hwpt_list twice
CVE-2023-540408.8 HIGHice: fix wrong fallback logic for FDIR
CVE-2023-541208.8 HIGHBluetooth: Fix race condition in hidp_session_thread
CVE-2022-507328.8 HIGHstaging: rtl8192u: Fix use after free in ieee80211_rx()
CVE-2023-539868.6 HIGHmips: bmips: BCM6358: disable RAC flush for TP1
CVE-2022-507468.4 HIGHerofs: validate the extent length for uncompressed pclusters

Showing top 20 of 322 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-54024

No comments yet

Leave a comment