CVE-2023-54211
kernel: tracing: Fix warning in trace_buffered_event_disable()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 30, 2025
Updated · June 30, 2026
Description
A reference counting flaw was found in the Linux kernel's tracing subsystem. The trace_buffered_event_disable() function can be called more times than trace_buffered_event_enable(), leading to a reference count underflow and a WARN_ON_ONCE warning when manipulating ftrace filter commands with event disabling.
Statement
This issue produces a kernel warning but does not cause a crash or memory corruption. Triggering it requires specific sequences of ftrace filter operations which typically need root access. The warning is informational and the system continues to function.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-911 · Improper Update of Reference Count