CVE-2023-54139 — Linux vulnerability
7 documents6 sources
Severity
5.3MEDIUM
No vectorEPSS
0.0%
top 92.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
tracing/user_events: Ensure write index cannot be negative
The write index indicates which event the data is for and accesses a
per-file array. The index is passed by user processes during write()
calls as the first 4 bytes. Ensure that it cannot be negative by
returning -EINVAL to prevent out of bounds accesses.
Update ftrace self-test to ensure this occurs properly.
Affected Packages4 packages
▶CVEListV5linux/linux7f5a08c79df35e68f1a43033450c5050f12bc155 — 0489c2b2c3104b89f078dbcec8c744dfc157d3e9+4
🔴Vulnerability Details
3OSV▶
CVE-2023-54139: In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Ensure write index cannot be negative The write index indicat↗2025-12-24
GHSA▶
GHSA-8m37-c7gh-2jmr: In the Linux kernel, the following vulnerability has been resolved:
tracing/user_events: Ensure write index cannot be negative
The write index indic↗2025-12-24