CVE-2023-53075

Source
https://cve.org/CVERecord?id=CVE-2023-53075
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53075.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-53075
Downstream
Related
Published
2025-05-02T15:55:26.023Z
Modified
2026-04-11T12:46:40.649364Z
Summary
ftrace: Fix invalid address access in lookup_rec() when index is 0
Details

In the Linux kernel, the following vulnerability has been resolved:

ftrace: Fix invalid address access in lookup_rec() when index is 0

KASAN reported follow problem:

BUG: KASAN: use-after-free in lookuprec Read of size 8 at addr ffff000199270ff0 by task modprobe CPU: 2 Comm: modprobe Call trace: kasanreport __asanload8 lookuprec ftracelocation archcheckftracelocation checkkprobeaddresssafe registerkprobe

When checking pg->records[pg->index - 1].ip in lookuprec(), it can get a pg which is newly added to ftracepagesstart in ftraceprocess_locs(). Before the first pg->index++, index is 0 and accessing pg->records[-1].ip will cause this problem.

Don't check the ip when pg->index is 0.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53075.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9644302e3315e7e36495d230d5ac7125a316d33e
Fixed
2de28e5ce34b22b73b833a21e2c45ae3aade3964
Fixed
7569ee04b0e3b32df79f64db3a7138573edad9bc
Fixed
ac58b88ccbbb8e9fb83e137cee04a856b1ea6635
Fixed
83c3b2f4e7c61367c7b24551f4c6eb94bbdda283
Fixed
2a0d71fabfeb349216d33f001a6421b1768bd3a9
Fixed
4f84f31f63416b0f02fc146ffdc4ab32723eb7e8
Fixed
f1bd8b7fd890d87d0dc4dedc6287ea34dd07c0b4
Fixed
ee92fa443358f4fc0017c1d0d325c27b37802504

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53075.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.5.0
Fixed
4.14.311
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.279
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.238
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.176
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.104
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.21
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.2.8

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53075.json"