CVE-2023-54139

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel’s tracing/user events functionality where the write index, used to identify the event for data access within a per-file array, could be negative. This could lead to out-of-bounds access. The issue is addressed by returning -EINVAL to prevent this negative index from being used. An ftrace self-test was updated to verify this behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.