CVE-2023-53007

tracing: Make sure trace_printk() can output as soon as it can be used

MEDIUM
5.5
CVSS Score
Published: March 27, 2025 at 04:43 PM UTC
Updated: June 17, 2026 at 06:44 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Make sure trace_printk() can output as soon as it can be used Currently trace_printk() can be used as soon as early_trace_init() is called from start_kernel(). But if a crash happens, and "ftrace_dump_on_oops" is set on the kernel command line, all you get will be: [ 0.456075] <idle>-0 0dN.2. 347519us : Unknown type 6 [ 0.456075] <idle>-0 0dN.2. 353141us : Unknown type 6 [ 0.456075] <idle>-0 0dN.2. 358684us : Unknown type 6 This is because the trace_printk() event (type 6) hasn't been registered yet. That gets done via an early_initcall(), which may be early, but not early enough. Instead of registering the trace_printk() event (and other ftrace events, which are not trace events) via an early_initcall(), have them registered at the same time that trace_printk() can be used. This way, if there is a crash before early_initcall(), then the trace_printk()s will actually be useful.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.12 ≤ v < 4.14.3054.12 ≤ v < 4.19.2724.12 ≤ v < 5.10.1664.12 ≤ v < 5.15.914.12 ≤ v < 5.4.2314.12 ≤ v < 6.1.94.12 ≤ v < 6.24.15 ≤ v < 4.19.2724.20 ≤ v < 5.4.2315.11 ≤ v < 5.15.915.16 ≤ v < 6.1.95.5 ≤ v < 5.10.1664.126.2 rc16.2 rc26.2 rc36.2 rc46.2 rc5e725c731e3bb1e892e7b564c945b121cb41d1087
Vendor states this is fixed in 198c83963f6335ca6d690cff067679560f2a3a22 (fixed)
Vendor states this is fixed in 3bb06eb6e9acf7c4a3e1b5bc87aed398ff8e2253 (fixed)
Vendor states this is fixed in 76b2390fdc80c0a8300e5da5b6b62d201b6fe9ce (fixed)
Vendor states this is fixed in b0af180514edea6c83dc9a299d9f383009c99f25 (fixed)
Vendor states this is fixed in b94d7c7654356860dd7719120c7d15ba38b6162a (fixed)
Vendor states this is fixed in de3930a4883ddad2244efd6d349013294c62c75c (fixed)
Vendor states this is fixed in f97eb0ab066133483a65c93eb894748de2f6b598 (fixed)
Vendor states this is fixed in 4.12 (unaffected)
Vendor states this is fixed in 4.14.305 (unaffected)
Vendor states this is fixed in 4.19.272 (unaffected)
Vendor states this is fixed in 5.10.166 (unaffected)
Vendor states this is fixed in 5.15.91 (unaffected)
Vendor states this is fixed in 5.4.231 (unaffected)
Vendor states this is fixed in 6.1.9 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)

References (7)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/198c83963f6335ca6d690cff067679560f2a3a22
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3bb06eb6e9acf7c4a3e1b5bc87aed398ff8e2253
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/76b2390fdc80c0a8300e5da5b6b62d201b6fe9ce
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b0af180514edea6c83dc9a299d9f383009c99f25
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b94d7c7654356860dd7719120c7d15ba38b6162a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/de3930a4883ddad2244efd6d349013294c62c75c
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f97eb0ab066133483a65c93eb894748de2f6b598

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card