{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2023-53075",
        "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "state": "PUBLISHED",
        "assignerShortName": "Linux",
        "dateReserved": "2025-05-02T15:51:43.549Z",
        "datePublished": "2025-05-02T15:55:26.023Z",
        "dateUpdated": "2026-05-11T19:38:03.944Z"
    },
    "containers": {
        "cna": {
            "providerMetadata": {
                "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
                "shortName": "Linux",
                "dateUpdated": "2026-05-11T19:38:03.944Z"
            },
            "descriptions": [
                {
                    "lang": "en",
                    "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Fix invalid address access in lookup_rec() when index is 0\n\nKASAN reported follow problem:\n\n BUG: KASAN: use-after-free in lookup_rec\n Read of size 8 at addr ffff000199270ff0 by task modprobe\n CPU: 2 Comm: modprobe\n Call trace:\n  kasan_report\n  __asan_load8\n  lookup_rec\n  ftrace_location\n  arch_check_ftrace_location\n  check_kprobe_address_safe\n  register_kprobe\n\nWhen checking pg->records[pg->index - 1].ip in lookup_rec(), it can get a\npg which is newly added to ftrace_pages_start in ftrace_process_locs().\nBefore the first pg->index++, index is 0 and accessing pg->records[-1].ip\nwill cause this problem.\n\nDon't check the ip when pg->index is 0."
                }
            ],
            "affected": [
                {
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "unaffected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "kernel/trace/ftrace.c"
                    ],
                    "versions": [
                        {
                            "version": "9644302e3315e7e36495d230d5ac7125a316d33e",
                            "lessThan": "2de28e5ce34b22b73b833a21e2c45ae3aade3964",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "9644302e3315e7e36495d230d5ac7125a316d33e",
                            "lessThan": "7569ee04b0e3b32df79f64db3a7138573edad9bc",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "9644302e3315e7e36495d230d5ac7125a316d33e",
                            "lessThan": "ac58b88ccbbb8e9fb83e137cee04a856b1ea6635",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "9644302e3315e7e36495d230d5ac7125a316d33e",
                            "lessThan": "83c3b2f4e7c61367c7b24551f4c6eb94bbdda283",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "9644302e3315e7e36495d230d5ac7125a316d33e",
                            "lessThan": "2a0d71fabfeb349216d33f001a6421b1768bd3a9",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "9644302e3315e7e36495d230d5ac7125a316d33e",
                            "lessThan": "4f84f31f63416b0f02fc146ffdc4ab32723eb7e8",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "9644302e3315e7e36495d230d5ac7125a316d33e",
                            "lessThan": "f1bd8b7fd890d87d0dc4dedc6287ea34dd07c0b4",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "9644302e3315e7e36495d230d5ac7125a316d33e",
                            "lessThan": "ee92fa443358f4fc0017c1d0d325c27b37802504",
                            "status": "affected",
                            "versionType": "git"
                        }
                    ]
                },
                {
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "affected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "kernel/trace/ftrace.c"
                    ],
                    "versions": [
                        {
                            "version": "3.5",
                            "status": "affected"
                        },
                        {
                            "version": "0",
                            "lessThan": "3.5",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "4.14.311",
                            "lessThanOrEqual": "4.14.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "4.19.279",
                            "lessThanOrEqual": "4.19.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "5.4.238",
                            "lessThanOrEqual": "5.4.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "5.10.176",
                            "lessThanOrEqual": "5.10.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "5.15.104",
                            "lessThanOrEqual": "5.15.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.1.21",
                            "lessThanOrEqual": "6.1.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.2.8",
                            "lessThanOrEqual": "6.2.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.3",
                            "lessThanOrEqual": "*",
                            "status": "unaffected",
                            "versionType": "original_commit_for_fix"
                        }
                    ]
                }
            ],
            "cpeApplicability": [
                {
                    "nodes": [
                        {
                            "operator": "OR",
                            "negate": false,
                            "cpeMatch": [
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "3.5",
                                    "versionEndExcluding": "4.14.311"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "3.5",
                                    "versionEndExcluding": "4.19.279"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "3.5",
                                    "versionEndExcluding": "5.4.238"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "3.5",
                                    "versionEndExcluding": "5.10.176"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "3.5",
                                    "versionEndExcluding": "5.15.104"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "3.5",
                                    "versionEndExcluding": "6.1.21"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "3.5",
                                    "versionEndExcluding": "6.2.8"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "3.5",
                                    "versionEndExcluding": "6.3"
                                }
                            ]
                        }
                    ]
                }
            ],
            "references": [
                {
                    "url": "https://git.kernel.org/stable/c/2de28e5ce34b22b73b833a21e2c45ae3aade3964"
                },
                {
                    "url": "https://git.kernel.org/stable/c/7569ee04b0e3b32df79f64db3a7138573edad9bc"
                },
                {
                    "url": "https://git.kernel.org/stable/c/ac58b88ccbbb8e9fb83e137cee04a856b1ea6635"
                },
                {
                    "url": "https://git.kernel.org/stable/c/83c3b2f4e7c61367c7b24551f4c6eb94bbdda283"
                },
                {
                    "url": "https://git.kernel.org/stable/c/2a0d71fabfeb349216d33f001a6421b1768bd3a9"
                },
                {
                    "url": "https://git.kernel.org/stable/c/4f84f31f63416b0f02fc146ffdc4ab32723eb7e8"
                },
                {
                    "url": "https://git.kernel.org/stable/c/f1bd8b7fd890d87d0dc4dedc6287ea34dd07c0b4"
                },
                {
                    "url": "https://git.kernel.org/stable/c/ee92fa443358f4fc0017c1d0d325c27b37802504"
                }
            ],
            "title": "ftrace: Fix invalid address access in lookup_rec() when index is 0",
            "x_generator": {
                "engine": "bippy-1.2.0"
            }
        }
    }
}