A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation.
The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remove_on_exec made it possible to call list_del_event() on before detaching from their group, making it possible to use a dangling pointer causing a use-after-free vulnerability.
We recommend upgrading past commit fd0815f632c24878e325821943edccc7fde947a2.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-develUpgrade kernel-develUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-uki-virtUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-uki-virtUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-64k-modules-extraUpgrade python3-perfUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade rtlaUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-develUpgrade kernel-64kUpgrade kernel-64k-debugUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-64k-debug-core | Jul 12, 2023 | May 1, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.104-63.140Upgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool | Jun 7, 2023 | May 1, 2023 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-livepatch-6.1.21-1.45Upgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-static | Feb 17, 2025 | Mar 15, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernelUpgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1 | Jun 22, 2023 | May 1, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 1, 2023 |
| Oracle_linux | — | Upgrade kernel | Jul 25, 2023 | Mar 15, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 22, 2023 | May 1, 2023 |
| Rocky_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-modulesUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs | Mar 5, 2024 | May 1, 2023 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-amazonUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-source-azure | May 10, 2023 | May 1, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1039-gcpUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1037-intel-iotgUpgrade linux-image-5.15.0-1035-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1041-awsUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1035-ibmUpgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-6.2.0-1005-awsUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.15.0-1042-awsUpgrade linux-image-5.15.0-1030-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-79-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1040-oracleUpgrade linux-image-gkeopUpgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-6.2.0-23-genericUpgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-79-genericUpgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-6.2.0-1005-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-79-lowlatencyUpgrade linux-image-5.15.0-79-generic-lpaeUpgrade linux-image-5.15.0-1043-azure-fdeUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1030-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-79-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1039-gkeUpgrade linux-image-5.15.0-1039-kvmUpgrade linux-image-5.15.0-1025-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1006-kvm | Jun 19, 2023 | May 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub