{"cve":"CVE-2023-54024","nvd":{"published":"2025-12-24T11:15:55.403","modified":"2026-06-17T06:46:33.507","status":"Deferred","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: Destroy target device if coalesced MMIO unregistration fails\n\nDestroy and free the target coalesced MMIO device if unregistering said\ndevice fails.  As clearly noted in the code, kvm_io_bus_unregister_dev()\ndoes not destroy the target device.\n\n  BUG: memory leak\n  unreferenced object 0xffff888112a54880 (size 64):\n    comm \"syz-executor.2\", pid 5258, jiffies 4297861402 (age 14.129s)\n    hex dump (first 32 bytes):\n      38 c7 67 15 00 c9 ff ff 38 c7 67 15 00 c9 ff ff  8.g.....8.g.....\n      e0 c7 e1 83 ff ff ff ff 00 30 67 15 00 c9 ff ff  .........0g.....\n    backtrace:\n      [<0000000006995a8a>] kmalloc include/linux/slab.h:556 [inline]\n      [<0000000006995a8a>] kzalloc include/linux/slab.h:690 [inline]\n      [<0000000006995a8a>] kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x3d0 arch/x86/kvm/../../../virt/kvm/coalesced_mmio.c:150\n      [<00000000022550c2>] kvm_vm_ioctl+0x47d/0x1600 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3323\n      [<000000008a75102f>] vfs_ioctl fs/ioctl.c:46 [inline]\n      [<000000008a75102f>] file_ioctl fs/ioctl.c:509 [inline]\n      [<000000008a75102f>] do_vfs_ioctl+0xbab/0x1160 fs/ioctl.c:696\n      [<0000000080e3f669>] ksys_ioctl+0x76/0xa0 fs/ioctl.c:713\n      [<0000000059ef4888>] __do_sys_ioctl fs/ioctl.c:720 [inline]\n      [<0000000059ef4888>] __se_sys_ioctl fs/ioctl.c:718 [inline]\n      [<0000000059ef4888>] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:718\n      [<000000006444fa05>] do_syscall_64+0x9f/0x4e0 arch/x86/entry/common.c:290\n      [<000000009a4ed50b>] entry_SYSCALL_64_after_hwframe+0x49/0xbe\n\n  BUG: leak checking failed","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/10c2a20d73e99463e69b7e92706791656adc16d7","https://git.kernel.org/stable/c/76a9886e1b61ce5592df5ae78a19ed30399ae189","https://git.kernel.org/stable/c/999439fd5da5a76253e2f2c37b94204f47d75491","https://git.kernel.org/stable/c/b1cb1fac22abf102ffeb29dd3eeca208a3869d54","https://git.kernel.org/stable/c/ccf6a7fb1aedb1472e1241ee55e4d26b68f8d066"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:17:07.138532058+00:00"},"epss":{"cve":"CVE-2023-54024","score":0.00192,"percentile":0.08871,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}