CVE-2023-54139
High
Description
In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Ensure write index cannot be negative The write index indicates which event the data is for and accesses a per-file array. The index is passed by user processes during write() calls as the first 4 bytes. Ensure that it cannot be negative by returning -EINVAL to prevent out of bounds accesses. Update ftrace self-test to ensure this occurs properly.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linux0489c2b2c3104b89f078dbcec8c744dfc157d3e9, 4fe46b5adf18e3dc606e62c9e6a0413398a17572, fa7f2f5d1739452280c22727c4384a52b72ab5de, cd98c93286a30cc4588dfd02453bec63c2f4acf4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 7f5a08c79df35e68f1a43033450c5050f12bc155 ≤ v < 0489c2b2c3104b89f078dbcec8c744dfc157d3e9, 7f5a08c79df35e68f1a43033450c5050f12bc155 ≤ v < 4fe46b5adf18e3dc606e62c9e6a0413398a17572, 7f5a08c79df35e68f1a43033450c5050f12bc155 ≤ v < fa7f2f5d1739452280c22727c4384a52b72ab5de, 7f5a08c79df35e68f1a43033450c5050f12bc155 ≤ v < cd98c93286a30cc4588dfd02453bec63c2f4acf4, 5.18 | 0489c2b2c3104b89f078dbcec8c744dfc157d3e9, 4fe46b5adf18e3dc606e62c9e6a0413398a17572, fa7f2f5d1739452280c22727c4384a52b72ab5de, cd98c93286a30cc4588dfd02453bec63c2f4acf4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.