{
  "cveId": "CVE-2023-53234",
  "url": "https://patchblox.com/security/cve/CVE-2023-53234",
  "summary": "CVE-2023-53234 is fixed in 20 products on 1 platform, first by ALAS2023-2023-138, released March 20, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  watchdog: Fix kmemleak in watchdog_cdev_register...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  watchdog: Fix kmemleak in watchdog_cdev_register  kmemleak reports memory leaks in watchdog_dev_register, as follows: unreferenced object 0xffff888116233000 (size 2048):   comm \u0022\u0022modprobe\u0022\u0022, pid 28147, jiffies 4353426116 (age 61.741s)   hex dump (first 32 bytes):     80 fa b9 05 81 88 ff ff 08 30 23 16 81 88 ff ff  .........0#.....     08 30 23 16 81 88 ff ff 00 00 00 00 00 00 00 00  .0#.............   backtrace:     [\u003C000000007f001ffd\u003E] __kmem_cache_alloc_node\u002B0x157/0x220     [\u003C000000006a389304\u003E] kmalloc_trace\u002B0x21/0x110     [\u003C000000008d640eea\u003E] watchdog_dev_register\u002B0x4e/0x780 [watchdog]     [\u003C0000000053c9f248\u003E] __watchdog_register_device\u002B0x4f0/0x680 [watchdog]     [\u003C00000000b2979824\u003E] watchdog_register_device\u002B0xd2/0x110 [watchdog]     [\u003C000000001f730178\u003E] 0xffffffffc10880ae     [\u003C000000007a1a8bcc\u003E] do_one_initcall\u002B0xcb/0x4d0     [\u003C00000000b98be325\u003E] do_init_module\u002B0x1ca/0x5f0     [\u003C0000000046d08e7c\u003E] load_module\u002B0x6133/0x70f0     ...  unreferenced object 0xffff888105b9fa80 (size 16):   comm \u0022\u0022modprobe\u0022\u0022, pid 28147, jiffies 4353426116 (age 61.741s)   hex dump (first 16 bytes):     77 61 74 63 68 64 6f 67 31 00 b9 05 81 88 ff ff  watchdog1.......   backtrace:     [\u003C000000007f001ffd\u003E] __kmem_cache_alloc_node\u002B0x157/0x220     [\u003C00000000486ab89b\u003E] __kmalloc_node_track_caller\u002B0x44/0x1b0     [\u003C000000005a39aab0\u003E] kvasprintf\u002B0xb5/0x140     [\u003C0000000024806f85\u003E] kvasprintf_const\u002B0x55/0x180     [\u003C000000009276cb7f\u003E] kobject_set_name_vargs\u002B0x56/0x150     [\u003C00000000a92e820b\u003E] dev_set_name\u002B0xab/0xe0     [\u003C00000000cec812c6\u003E] watchdog_dev_register\u002B0x285/0x780 [watchdog]     [\u003C0000000053c9f248\u003E] __watchdog_register_device\u002B0x4f0/0x680 [watchdog]     [\u003C00000000b2979824\u003E] watchdog_register_device\u002B0xd2/0x110 [watchdog]     [\u003C000000001f730178\u003E] 0xffffffffc10880ae     [\u003C000000007a1a8bcc\u003E] do_one_initcall\u002B0xcb/0x4d0     [\u003C00000000b98be325\u003E] do_init_module\u002B0x1ca/0x5f0     [\u003C0000000046d08e7c\u003E] load_module\u002B0x6133/0x70f0     ...  The reason is that put_device is not be called if cdev_device_add fails and wdd-\u003Eid != 0.  watchdog_cdev_register   wd_data = kzalloc                             [1]   err = dev_set_name                            [2]   ..   err = cdev_device_add   if (err) {     if (wdd-\u003Eid == 0) {  // wdd-\u003Eid != 0       ..     }     return err;  // [1],[2] would be leaked  To fix it, call put_device in all wdd-\u003Eid cases.",
  "published": "2023-03-20T18:27:00Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.0016,
  "epssPercentile": 0.05151,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.1.19-30.43",
      "release": "amzn 2023",
      "fixedVersion": "1.0-0.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53234",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53234",
      "released": "2025-09-15T15:15:50Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53234",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53234",
      "released": "2025-09-15T15:15:50Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53234",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53234",
      "released": "2025-09-15T15:15:50Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.19-30.43.amzn2023",
      "fix": "ALAS2023-2023-138",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-138",
      "released": "2023-03-20T18:27:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}