CVE-2023-54139: tracing/user_events: Ensure write index cannot be negative
In the Linux kernel, the following vulnerability has been resolved:
tracing/userevents: Ensure write index cannot be negative
The write index indicates which event the data is for and accesses a per-file array. The index is passed by user processes during write() calls as the first 4 bytes. Ensure that it cannot be negative by returning -EINVAL to prevent out of bounds accesses.
Update ftrace self-test to ensure this occurs properly.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54139?
CVE-2023-54139 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2023-54139?
To fix CVE-2023-54139, update your Linux kernel to the patched version released by the maintainers.
What systems are affected by CVE-2023-54139?
CVE-2023-54139 affects various versions of the Linux kernel that utilize user events tracing.
What are the potential impacts of CVE-2023-54139?
The potential impacts of CVE-2023-54139 may include denial of service or unexpected behaviors in user event logging.
When was CVE-2023-54139 disclosed?
CVE-2023-54139 was disclosed as a vulnerability in the Linux kernel during a routine security review.