Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-54139

tracing/user_events: Ensure write index cannot be negative

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Ensure write index cannot be negative The write index indicates which event the data is for and accesses a per-file array. The index is passed by user processes during write() calls as the first 4 bytes. Ensure that it cannot be negative by returning -EINVAL to prevent out of bounds accesses. Update ftrace self-test to ensure this occurs properly.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7f5a08c79df35e68f1a43033450c5050f12bc155 to < 0489c2b2c3104b89f078dbcec8c744dfc157d3e9affected
  • 7f5a08c79df35e68f1a43033450c5050f12bc155 to < 4fe46b5adf18e3dc606e62c9e6a0413398a17572affected
  • 7f5a08c79df35e68f1a43033450c5050f12bc155 to < fa7f2f5d1739452280c22727c4384a52b72ab5deaffected
  • 7f5a08c79df35e68f1a43033450c5050f12bc155 to < cd98c93286a30cc4588dfd02453bec63c2f4acf4affected

Linux Linux

Default version status: affected

  • 5.18affected
  • 0 to < 5.18unaffected
  • 6.1.28 to ≤ 6.1.*unaffected
  • 6.2.15 to ≤ 6.2.*unaffected
  • 6.3.2 to ≤ 6.3.*unaffected
  • 6.4 to ≤ *unaffected

References