Not yet scoredPublished Dec 24, 2025

CVE-2023-54024KVM: Destroy target device if coalesced MMIO unregistration fails

Updated under an hour ago (Oct 27, 2026, 3:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy target device if coalesced MMIO unregistration fails Destroy and free the target coalesced MMIO device if unregistering said device fails. As clearly noted in the code, kvm_io_bus_unregister_dev() does not destroy the target device. BUG: memory leak unreferenced object 0xffff888112a54880 (size 64): comm "syz-executor.2", pid 5258, jiffies 4297861402 (age 14.129s) hex dump (first 32 bytes): 38 c7 67 15 00 c9 ff ff 38 c7 67 15 00 c9 ff ff 8.g.....8.g..... e0 c7 e1 83 ff ff ff ff 00 30 67 15 00 c9 ff ff .........0g..... backtrace: [<0000000006995a8a>] kmalloc include/linux/slab.h:556 [inline] [<0000000006995a8a>] kzalloc include/linux/slab.h:690 [inline] [<0000000006995a8a>] kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x3d0 arch/x86/kvm/../../../virt/kvm/coalesced_mmio.c:150 [<00000000022550c2>] kvm_vm_ioctl+0x47d/0x1600 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3323 [<000000008a75102f>] vfs_ioctl fs/ioctl.c:46 [inline] [<000000008a75102f>] file_ioctl fs/ioctl.c:509 [inline] [<000000008a75102f>] do_vfs_ioctl+0xbab/0x1160 fs/ioctl.c:696 [<0000000080e3f669>] ksys_ioctl+0x76/0xa0 fs/ioctl.c:713 [<0000000059ef4888>] __do_sys_ioctl fs/ioctl.c:720 [inline] [<0000000059ef4888>] __se_sys_ioctl fs/ioctl.c:718 [inline] [<0000000059ef4888>] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:718 [<000000006444fa05>] do_syscall_64+0x9f/0x4e0 arch/x86/entry/common.c:290 [<000000009a4ed50b>] entry_SYSCALL_64_after_hwframe+0x49/0xbe BUG: leak checking failed

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 23, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 7d1bc32d6477ff96a32695ea4be8144e4513ab2d before 10c2a20d73e99463e69b7e92706791656adc16d7; from 2a20592baff59c5351c5200ec667e1a2aa22af85 before 76a9886e1b61ce5592df5ae78a19ed30399ae189; from 5d3c4c79384af06e3c8e25b7770b6247496b4417 before 999439fd5da5a76253e2f2c37b94204f47d75491; from 5d3c4c79384af06e3c8e25b7770b6247496b4417 before ccf6a7fb1aedb1472e1241ee55e4d26b68f8d066; from 5d3c4c79384af06e3c8e25b7770b6247496b4417 before fb436dd6914325075f07d19851ab277b7a693ae7; from 5d3c4c79384af06e3c8e25b7770b6247496b4417 before b1cb1fac22abf102ffeb29dd3eeca208a3869d54; 168e82f640ed1891a700bdb43e37da354b2ab63c; 50cbad42bfea8c052b7ca590bd4126cdc898713c; and 4 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/10c2a20d73e99463e69b7e92706791656adc16d7
https://git.kernel.org/stable/c/76a9886e1b61ce5592df5ae78a19ed30399ae189
https://git.kernel.org/stable/c/999439fd5da5a76253e2f2c37b94204f47d75491
https://git.kernel.org/stable/c/ccf6a7fb1aedb1472e1241ee55e4d26b68f8d066
https://git.kernel.org/stable/c/fb436dd6914325075f07d19851ab277b7a693ae7
https://git.kernel.org/stable/c/b1cb1fac22abf102ffeb29dd3eeca208a3869d54

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.