cbcvebase.
CVE-2023-53693
published 2025-10-22

CVE-2023-53693: In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in raw_gadget driver Currently, increasing raw_dev->count…

PriorityP420
EPSS
0.20%
10.0th percentile
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in raw_gadget driver Currently, increasing raw_dev->count happens before invoke the raw_queue_event(), if the raw_queue_event() return error, invoke raw_release() will not trigger the dev_free() to be called. [ 268.905865][ T5067] raw-gadget.0 gadget.0: failed to queue event [ 268.912053][ T5067] udc dummy_udc.0: failed to start USB Raw Gadget: -12 [ 268.918885][ T5067] raw-gadget.0: probe of gadget.0 failed with error -12 [ 268.925956][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.934657][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 BUG: memory leak [] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076 [] kmalloc include/linux/slab.h:582 [inline] [] kzalloc include/linux/slab.h:703 [inline] [] dev_new drivers/usb/gadget/legacy/raw_gadget.c:191 [inline] [] raw_open+0x45/0x110 drivers/usb/gadget/legacy/raw_gadget.c:385 [] misc_open+0x1a9/0x1f0 drivers/char/misc.c:165 [] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076 [] kmalloc include/linux/slab.h:582 [inline] [] raw_ioctl_init+0xdf/0x410 drivers/usb/gadget/legacy/raw_gadget.c:460 [] raw_ioctl+0x5f9/0x1120 drivers/usb/gadget/legacy/raw_gadget.c:1250 [] vfs_ioctl fs/ioctl.c:51 [inline] [] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076 [] kmalloc include/linux/slab.h:582 [inline] [] kzalloc include/linux/slab.h:703 [inline] [] dummy_alloc_request+0x5a/0xe0 drivers/usb/gadget/udc/dummy_hcd.c:665 [] usb_ep_alloc_request+0x22/0xd0 drivers/usb/gadget/udc/core.c:196 [] gadget_bind+0x6d/0x370 drivers/usb/gadget/legacy/raw_gadget.c:292 This commit therefore invoke kref_get() under the condition that raw_queue_event() return success.

Affected

15 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.52-1 (bookworm)linux 6.1.52-1 (bookworm)
linuxlinux
linuxlinux>= f2c2e717642c66f7fe7e5dd69b2e8ff5849f4d10 < 68e6287ac61dc22513cd39f02b9ac1fef28513e468e6287ac61dc22513cd39f02b9ac1fef28513e4
linuxlinux>= f2c2e717642c66f7fe7e5dd69b2e8ff5849f4d10 < 0f7a2b567197798da7bfa2252f4485c0ca6c62660f7a2b567197798da7bfa2252f4485c0ca6c6266
linuxlinux>= f2c2e717642c66f7fe7e5dd69b2e8ff5849f4d10 < de77000c1923d7942f9b4f08447c8feeae1c0f33de77000c1923d7942f9b4f08447c8feeae1c0f33
linuxlinux>= f2c2e717642c66f7fe7e5dd69b2e8ff5849f4d10 < 9934e5d07c0dc294169a7d52f6309f35cd6d77559934e5d07c0dc294169a7d52f6309f35cd6d7755
linuxlinux>= f2c2e717642c66f7fe7e5dd69b2e8ff5849f4d10 < 83e30f2bf86ef7c38fbd476ed81a88522b62062883e30f2bf86ef7c38fbd476ed81a88522b620628
linuxlinux_kernel>= 0 < 5.10.191-15.10.191-1
linuxlinux_kernel>= 0 < 6.1.52-16.1.52-1
linuxlinux_kernel>= 0 < 6.4.11-16.4.11-1
linuxlinux_kernel>= 0 < 6.4.11-16.4.11-1
linuxlinux_kernel>= 5.11.0 < 5.15.1245.15.124
linuxlinux_kernel>= 5.16.0 < 6.1.436.1.43
linuxlinux_kernel>= 5.7.0 < 5.10.1905.10.190
linuxlinux_kernel>= 6.2.0 < 6.4.86.4.8
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.