CVE-2023-53693
published 2025-10-22CVE-2023-53693: In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in raw_gadget driver Currently, increasing raw_dev->count…
PriorityP420
EPSS
0.20%
10.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
USB: gadget: Fix the memory leak in raw_gadget driver
Currently, increasing raw_dev->count happens before invoke the
raw_queue_event(), if the raw_queue_event() return error, invoke
raw_release() will not trigger the dev_free() to be called.
[ 268.905865][ T5067] raw-gadget.0 gadget.0: failed to queue event
[ 268.912053][ T5067] udc dummy_udc.0: failed to start USB Raw Gadget: -12
[ 268.918885][ T5067] raw-gadget.0: probe of gadget.0 failed with error -12
[ 268.925956][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 268.934657][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
BUG: memory leak
[] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076
[] kmalloc include/linux/slab.h:582 [inline]
[] kzalloc include/linux/slab.h:703 [inline]
[] dev_new drivers/usb/gadget/legacy/raw_gadget.c:191 [inline]
[] raw_open+0x45/0x110 drivers/usb/gadget/legacy/raw_gadget.c:385
[] misc_open+0x1a9/0x1f0 drivers/char/misc.c:165
[] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076
[] kmalloc include/linux/slab.h:582 [inline]
[] raw_ioctl_init+0xdf/0x410 drivers/usb/gadget/legacy/raw_gadget.c:460
[] raw_ioctl+0x5f9/0x1120 drivers/usb/gadget/legacy/raw_gadget.c:1250
[] vfs_ioctl fs/ioctl.c:51 [inline]
[] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076
[] kmalloc include/linux/slab.h:582 [inline]
[] kzalloc include/linux/slab.h:703 [inline]
[] dummy_alloc_request+0x5a/0xe0 drivers/usb/gadget/udc/dummy_hcd.c:665
[] usb_ep_alloc_request+0x22/0xd0 drivers/usb/gadget/udc/core.c:196
[] gadget_bind+0x6d/0x370 drivers/usb/gadget/legacy/raw_gadget.c:292
This commit therefore invoke kref_get() under the condition that
raw_queue_event() return success.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= f2c2e717642c66f7fe7e5dd69b2e8ff5849f4d10 < 68e6287ac61dc22513cd39f02b9ac1fef28513e4 | 68e6287ac61dc22513cd39f02b9ac1fef28513e4 |
| linux | linux | >= f2c2e717642c66f7fe7e5dd69b2e8ff5849f4d10 < 0f7a2b567197798da7bfa2252f4485c0ca6c6266 | 0f7a2b567197798da7bfa2252f4485c0ca6c6266 |
| linux | linux | >= f2c2e717642c66f7fe7e5dd69b2e8ff5849f4d10 < de77000c1923d7942f9b4f08447c8feeae1c0f33 | de77000c1923d7942f9b4f08447c8feeae1c0f33 |
| linux | linux | >= f2c2e717642c66f7fe7e5dd69b2e8ff5849f4d10 < 9934e5d07c0dc294169a7d52f6309f35cd6d7755 | 9934e5d07c0dc294169a7d52f6309f35cd6d7755 |
| linux | linux | >= f2c2e717642c66f7fe7e5dd69b2e8ff5849f4d10 < 83e30f2bf86ef7c38fbd476ed81a88522b620628 | 83e30f2bf86ef7c38fbd476ed81a88522b620628 |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 5.11.0 < 5.15.124 | 5.15.124 |
| linux | linux_kernel | >= 5.16.0 < 6.1.43 | 6.1.43 |
| linux | linux_kernel | >= 5.7.0 < 5.10.190 | 5.10.190 |
| linux | linux_kernel | >= 6.2.0 < 6.4.8 | 6.4.8 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
USB: gadget: Fix the memory leak in raw_gadget driver
osv·2025-10-22
CVE-2023-53693 USB: gadget: Fix the memory leak in raw_gadget driver
USB: gadget: Fix the memory leak in raw_gadget driver
In the Linux kernel, the following vulnerability has been resolved:
USB: gadget: Fix the memory leak in raw_gadget driver
Currently, increasing raw_dev->count happens before invoke the
raw_queue_event(), if the raw_queue_event() return error, invoke
raw_release() will not trigger the dev_free() to be called.
[ 268.905865][ T5067] raw-gadget.0 gadget.0: failed to queue event
[ 268.912053][ T5067] udc dummy_udc.0: failed to start USB Raw Gadget: -12
[ 268.918885][ T5067] raw-gadget.0: probe of gadget.0 failed with error -12
[ 268.925956][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 268.934657][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
BUG: memory leak
[] kmalloc_trace+0
GHSA
GHSA-cf5g-vjxj-5fc7: In the Linux kernel, the following vulnerability has been resolved:
USB: gadget: Fix the memory leak in raw_gadget driver
Currently, increasing raw_
ghsa_unreviewed·2025-10-22
CVE-2023-53693 GHSA-cf5g-vjxj-5fc7: In the Linux kernel, the following vulnerability has been resolved:
USB: gadget: Fix the memory leak in raw_gadget driver
Currently, increasing raw_
In the Linux kernel, the following vulnerability has been resolved:
USB: gadget: Fix the memory leak in raw_gadget driver
Currently, increasing raw_dev->count happens before invoke the
raw_queue_event(), if the raw_queue_event() return error, invoke
raw_release() will not trigger the dev_free() to be called.
[ 268.905865][ T5067] raw-gadget.0 gadget.0: failed to queue event
[ 268.912053][ T5067] udc dummy_udc.0: failed to start USB Raw Gadget: -12
[ 268.918885][ T5067] raw-gadget.0: probe of gadget.0 failed with error -12
[ 268.925956][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 268.934657][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
BUG: memory leak
[] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076
[] kmalloc include/linux
OSV
CVE-2023-53693: In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in raw_gadget driver Currently, increasing raw_de
osv·2025-10-22
CVE-2023-53693 CVE-2023-53693: In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in raw_gadget driver Currently, increasing raw_de
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in raw_gadget driver Currently, increasing raw_dev->count happens before invoke the raw_queue_event(), if the raw_queue_event() return error, invoke raw_release() will not trigger the dev_free() to be called. [ 268.905865][ T5067] raw-gadget.0 gadget.0: failed to queue event [ 268.912053][ T5067] udc dummy_udc.0: failed to start USB Raw Gadget: -12 [ 268.918885][ T5067] raw-gadget.0: probe of gadget.0 failed with error -12 [ 268.925956][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.934657][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 BUG: memory leak [] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076 [] kmalloc include/linux/slab
Red Hat
kernel: USB: gadget: Fix the memory leak in raw_gadget driver
vendor_redhat·2025-10-22
CVE-2023-53693 kernel: USB: gadget: Fix the memory leak in raw_gadget driver
kernel: USB: gadget: Fix the memory leak in raw_gadget driver
In the Linux kernel, the following vulnerability has been resolved:
USB: gadget: Fix the memory leak in raw_gadget driver
Currently, increasing raw_dev->count happens before invoke the
raw_queue_event(), if the raw_queue_event() return error, invoke
raw_release() will not trigger the dev_free() to be called.
[ 268.905865][ T5067] raw-gadget.0 gadget.0: failed to queue event
[ 268.912053][ T5067] udc dummy_udc.0: failed to start USB Raw Gadget: -12
[ 268.918885][ T5067] raw-gadget.0: probe of gadget.0 failed with error -12
[ 268.925956][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 268.934657][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
BUG: memory leak
[] kmalloc_trac
Debian
CVE-2023-53693: linux - In the Linux kernel, the following vulnerability has been resolved: USB: gadget...
vendor_debian·2023
CVE-2023-53693 CVE-2023-53693: linux - In the Linux kernel, the following vulnerability has been resolved: USB: gadget...
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in raw_gadget driver Currently, increasing raw_dev->count happens before invoke the raw_queue_event(), if the raw_queue_event() return error, invoke raw_release() will not trigger the dev_free() to be called. [ 268.905865][ T5067] raw-gadget.0 gadget.0: failed to queue event [ 268.912053][ T5067] udc dummy_udc.0: failed to start USB Raw Gadget: -12 [ 268.918885][ T5067] raw-gadget.0: probe of gadget.0 failed with error -12 [ 268.925956][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.934657][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 BUG: memory leak [] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076 [] kmalloc include/linux/slab
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0f7a2b567197798da7bfa2252f4485c0ca6c6266https://git.kernel.org/stable/c/68e6287ac61dc22513cd39f02b9ac1fef28513e4https://git.kernel.org/stable/c/83e30f2bf86ef7c38fbd476ed81a88522b620628https://git.kernel.org/stable/c/9934e5d07c0dc294169a7d52f6309f35cd6d7755https://git.kernel.org/stable/c/de77000c1923d7942f9b4f08447c8feeae1c0f33
2025-10-22
Published