High 7.8Published Dec 24, 2025

CVE-2023-54139tracing/user_events: Ensure write index cannot be negative

Updated under an hour ago (Oct 28, 2026, 5:20 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Ensure write index cannot be negative The write index indicates which event the data is for and accesses a per-file array. The index is passed by user processes during write() calls as the first 4 bytes. Ensure that it cannot be negative by returning -EINVAL to prevent out of bounds accesses. Update ftrace self-test to ensure this occurs properly.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 7f5a08c79df35e68f1a43033450c5050f12bc155 before 0489c2b2c3104b89f078dbcec8c744dfc157d3e9; 7f5a08c79df35e68f1a43033450c5050f12bc155 builds before 4fe46b5adf18e3dc606e62c9e6a0413398a17572; from 7f5a08c79df35e68f1a43033450c5050f12bc155 before fa7f2f5d1739452280c22727c4384a52b72ab5de; from 7f5a08c79df35e68f1a43033450c5050f12bc155 before cd98c93286a30cc4588dfd02453bec63c2f4acf4	CNA record

References

References

https://git.kernel.org/stable/c/0489c2b2c3104b89f078dbcec8c744dfc157d3e9
https://git.kernel.org/stable/c/4fe46b5adf18e3dc606e62c9e6a0413398a17572
https://git.kernel.org/stable/c/fa7f2f5d1739452280c22727c4384a52b72ab5de
https://git.kernel.org/stable/c/cd98c93286a30cc4588dfd02453bec63c2f4acf4

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.