Riskcovery

CVE-2023-54209

block: fix blktrace debugfs entries leakage

State
Published
Severity
Not scored
Published
Dec 30, 2025
Updated
May 11, 2026
Reserved
Dec 30, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

block: fix blktrace debugfs entries leakage

Commit 99d055b4fd4b ("block: remove per-disk debugfs files in blk_unregister_queue") moves blk_trace_shutdown() from blk_release_queue() to blk_unregister_queue(), this is safe if blktrace is created through sysfs, however, there is a regression in corner case.

blktrace can still be enabled after del_gendisk() through ioctl if the disk is opened before del_gendisk(), and if blktrace is not shutdown through ioctl before closing the disk, debugfs entries will be leaked.

Fix this problem by shutdown blktrace in disk_release(), this is safe because blk_trace_remove() is reentrant.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 99d055b4fd4bbb309c6cdb51a0d420669f777944 to before aa07e56c6a9c7558165690d14eed4fe8babf34fbAffected
  • 99d055b4fd4bbb309c6cdb51a0d420669f777944 to before 7149e57cf01184fba175589f8fbe9fbf33be02e1Affected
  • 99d055b4fd4bbb309c6cdb51a0d420669f777944 to before 942e81650b81b4ca62f1d8c61de455c9e7c7e6caAffected
  • 99d055b4fd4bbb309c6cdb51a0d420669f777944 to before dd7de3704af9989b780693d51eaea49a665bd9c2Affected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.39 through 6.1.*Not affected
  • 6.3.13 through 6.3.*Not affected
  • 6.4.4 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.