
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2023-53007 is a vulnerability in the Linux kernel's tracing functionality, specifically related to the trace_printk() feature. The issue was discovered and disclosed on March 27, 2025. The vulnerability affects the Linux kernel's ability to properly output trace_printk() messages during early boot stages (NVD).
The vulnerability occurs because trace_printk() can be used as soon as early_trace_init() is called from start_kernel(), but the trace_printk() event (type 6) isn't registered until an early_initcall(). This timing mismatch means that if a crash happens before early_initcall() and 'ftrace_dump_on_oops' is set on the kernel command line, the trace output shows only 'Unknown type 6' messages instead of proper trace information (NVD).
When a system crash occurs before the early_initcall() stage, and 'ftrace_dump_on_oops' is enabled, the system fails to provide meaningful trace output, instead displaying only 'Unknown type 6' messages. This impacts the ability to properly diagnose early boot issues (NVD).
The issue has been resolved by modifying the registration timing of the trace_printk() event to coincide with when trace_printk() becomes usable, ensuring that trace output will be properly formatted even if a crash occurs before early_initcall() (NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."