CVE-2023-54139
kernel: Linux kernel: Privilege escalation via out-of-bounds write in tracing/user_events
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 24, 2025
Updated · August 20, 2026
Description
A flaw was found in the Linux kernel, specifically within the tracing/user_events component. This vulnerability allows a local user to provide a negative value for the write index during certain operations, leading to an out-of-bounds memory access. This could potentially enable the local user to escalate their privileges on the system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 · Out-of-bounds Write