PT-2025-54038 · Linux · Linux Kernel

Published 2025-12-30 · Updated 2026-03-24 · CVE-2023-54209

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to the handling of blktrace debugfs entries. A regression was introduced where debugfs entries could be leaked if blktrace was enabled after a disk was removed via del gendisk() and not properly shut down through ioctl before the disk was closed. This occurs when blktrace is created through ioctl. The issue is addressed by shutting down blktrace in the disk release() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54209

SUSE-SU-2026:0278-1

SUSE-SU-2026:0281-1

SUSE-SU-2026:0293-1

SUSE-SU-2026:0315-1

SUSE-SU-2026:20477-1

SUSE-SU-2026:20498-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

Affected Products

Linux Kernel

References · 1458

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54209.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-54209 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20845-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0281-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54209 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54209 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20876-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0293-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54209 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54209 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20498-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20477-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0278-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54209 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54209 · Security Note