{"id":"DEBIAN-CVE-2023-53693","details":"In the Linux kernel, the following vulnerability has been resolved:  USB: gadget: Fix the memory leak in raw_gadget driver  Currently, increasing raw_dev-\u003ecount happens before invoke the raw_queue_event(), if the raw_queue_event() return error, invoke raw_release() will not trigger the dev_free() to be called.  [  268.905865][ T5067] raw-gadget.0 gadget.0: failed to queue event [  268.912053][ T5067] udc dummy_udc.0: failed to start USB Raw Gadget: -12 [  268.918885][ T5067] raw-gadget.0: probe of gadget.0 failed with error -12 [  268.925956][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [  268.934657][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16  BUG: memory leak  [\u003cffffffff8154bf94\u003e] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076 [\u003cffffffff8347eb55\u003e] kmalloc include/linux/slab.h:582 [inline] [\u003cffffffff8347eb55\u003e] kzalloc include/linux/slab.h:703 [inline] [\u003cffffffff8347eb55\u003e] dev_new drivers/usb/gadget/legacy/raw_gadget.c:191 [inline] [\u003cffffffff8347eb55\u003e] raw_open+0x45/0x110 drivers/usb/gadget/legacy/raw_gadget.c:385 [\u003cffffffff827d1d09\u003e] misc_open+0x1a9/0x1f0 drivers/char/misc.c:165  [\u003cffffffff8154bf94\u003e] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076 [\u003cffffffff8347cd2f\u003e] kmalloc include/linux/slab.h:582 [inline] [\u003cffffffff8347cd2f\u003e] raw_ioctl_init+0xdf/0x410 drivers/usb/gadget/legacy/raw_gadget.c:460 [\u003cffffffff8347dfe9\u003e] raw_ioctl+0x5f9/0x1120 drivers/usb/gadget/legacy/raw_gadget.c:1250 [\u003cffffffff81685173\u003e] vfs_ioctl fs/ioctl.c:51 [inline]  [\u003cffffffff8154bf94\u003e] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076 [\u003cffffffff833ecc6a\u003e] kmalloc include/linux/slab.h:582 [inline] [\u003cffffffff833ecc6a\u003e] kzalloc include/linux/slab.h:703 [inline] [\u003cffffffff833ecc6a\u003e] dummy_alloc_request+0x5a/0xe0 drivers/usb/gadget/udc/dummy_hcd.c:665 [\u003cffffffff833e9132\u003e] usb_ep_alloc_request+0x22/0xd0 drivers/usb/gadget/udc/core.c:196 [\u003cffffffff8347f13d\u003e] gadget_bind+0x6d/0x370 drivers/usb/gadget/legacy/raw_gadget.c:292  This commit therefore invoke kref_get() under the condition that raw_queue_event() return success.","modified":"2026-09-01T20:05:16.957633669Z","published":"2025-10-22T14:15:43.787Z","upstream":["CVE-2023-53693"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-53693"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.52-1"}]}],"versions":["6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53693.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.11-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53693.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.11-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53693.json"}}],"schema_version":"1.9.0"}