CVE-2023-54139
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/12/2025
Última modificación:
04/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
tracing/user_events: Ensure write index cannot be negative<br />
<br />
The write index indicates which event the data is for and accesses a<br />
per-file array. The index is passed by user processes during write()<br />
calls as the first 4 bytes. Ensure that it cannot be negative by<br />
returning -EINVAL to prevent out of bounds accesses.<br />
<br />
Update ftrace self-test to ensure this occurs properly.
Impacto
Puntuación base 3.x
7.80
Gravedad 3.x
ALTA