CVE-2023-54139
- Source
- https://cve.org/CVERecord?id=CVE-2023-54139
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54139.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-54139
- Downstream
- Published
- 2025-12-24T13:06:54.094Z
- Modified
- 2026-04-02T09:45:38.063363Z
- Summary
- tracing/user_events: Ensure write index cannot be negative
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
tracing/user_events: Ensure write index cannot be negative
The write index indicates which event the data is for and accesses a per-file array. The index is passed by user processes during write() calls as the first 4 bytes. Ensure that it cannot be negative by returning -EINVAL to prevent out of bounds accesses.
Update ftrace self-test to ensure this occurs properly.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54139.json" }- References
-
- https://git.kernel.org/stable/c/0489c2b2c3104b89f078dbcec8c744dfc157d3e9
- https://git.kernel.org/stable/c/4fe46b5adf18e3dc606e62c9e6a0413398a17572
- https://git.kernel.org/stable/c/cd98c93286a30cc4588dfd02453bec63c2f4acf4
- https://git.kernel.org/stable/c/fa7f2f5d1739452280c22727c4384a52b72ab5de
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54139.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-54139
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced7f5a08c79df35e68f1a43033450c5050f12bc155Fixed0489c2b2c3104b89f078dbcec8c744dfc157d3e9Fixed4fe46b5adf18e3dc606e62c9e6a0413398a17572Fixedfa7f2f5d1739452280c22727c4384a52b72ab5deFixedcd98c93286a30cc4588dfd02453bec63c2f4acf4