CVE-2013-2094
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain…
Not rated yet
Known exploited
- Severity
- Not rated yet
- No source has published a CVSS score yet
- Exploit chance (EPSS)
- 47.71%
- Chance of exploitation in the next 30 days. Higher than 98.85% of scored vulnerabilities.
- Known exploited
- Yes
- In CISA's catalog since Sep 15, 2022
- Weakness
- —
- Not classified
- Fix
- None yet
- No fixed version published
Exploited in the wild. Linux Kernel Privilege Escalation Vulnerability (Linux Kernel). Required action: Apply updates per vendor instructions. Due for U.S. federal agencies by Oct 6, 2022.
Description
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.
How to fix
No fixed version has been published yet. Until one is, remove or replace the package, or turn off or isolate the affected feature. This page updates when a fix ships.
References
Advisories
- lists.centos.org/pipermail/centos-announce/2013-May/019729.html
- lists.centos.org/pipermail/centos-announce/2013-May/019733.html
- lists.opensuse.org/opensuse-security-announce/2013-05/msg00008.html
- lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html
- lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
- lists.opensuse.org/opensuse-security-announce/2013-06/msg00009.html
- lists.opensuse.org/opensuse-security-announce/2013-06/msg00017.html
- lkml.indiana.edu/hypermail/linux/kernel/1304.1/03652.html
- lkml.indiana.edu/hypermail/linux/kernel/1304.1/03976.html
- lkml.indiana.edu/hypermail/linux/kernel/1304.1/04302.html
- news.ycombinator.com/item
- packetstormsecurity.com/files/121616/semtex.c
- rhn.redhat.com/errata/RHSA-2013-0830.html
- exploit-db.com/exploits/33589
- mandriva.com/security/advisories
- openwall.com/lists/oss-security/2013/05/14/6
- reddit.com/r/netsec/comments/1eb9iw
- ubuntu.com/usn/USN-1825-1
- ubuntu.com/usn/USN-1826-1
- ubuntu.com/usn/USN-1827-1
- ubuntu.com/usn/USN-1828-1
- ubuntu.com/usn/USN-1836-1
- ubuntu.com/usn/USN-1838-1
- github.com/torvalds/linux/commit/8176cced706b5e5d15887584150764894e94e02f
Fixes and patches
Issue reports
Other links
Timeline
- Published
- Added to CISA's Known Exploited Vulnerabilities catalog
- Remediation due for U.S. federal agencies
- Last updated by the source
- Latest EPSS score
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor