CVE-2023-53007

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Make sure trace_printk() can output as soon as it can be used Currently trace_printk() can be used as soon as early_trace_init() is called from start_kernel(). But if a crash happens, and "ftrace_dump_on_oops" is set on the kernel command line, all you get will be: [ 0.456075] <idle>-0 0dN.2. 347519us : Unknown type 6 [ 0.456075] <idle>-0 0dN.2. 353141us : Unknown type 6 [ 0.456075] <idle>-0 0dN.2. 358684us : Unknown type 6 This is because the trace_printk() event (type 6) hasn't been registered yet. That gets done via an early_initcall(), which may be early, but not early enough. Instead of registering the trace_printk() event (and other ftrace events, which are not trace events) via an early_initcall(), have them registered at the same time that trace_printk() can be used. This way, if there is a crash before early_initcall(), then the trace_printk()s will actually be useful.

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedMar 27, 2025
First seenMar 27, 2025

How to fix

Affected products

ProductAffected versionsFixed in
linux linux_kernel4.12 ≤ v < 4.14.305, 4.15 ≤ v < 4.19.272, 4.20 ≤ v < 5.4.231, 5.5 ≤ v < 5.10.166, 5.11 ≤ v < 5.15.91, 5.16 ≤ v < 6.1.9, 6.24.14.305, 4.19.272, 5.4.231, 5.10.166, 5.15.91, 6.1.9

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.