A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.
A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group().
We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-docUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-coreUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade perfUpgrade kernel-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade rvUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-64k-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-64kUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-develUpgrade kernelUpgrade kernel-64k-debug-develUpgrade rtlaUpgrade kernel-debug | Apr 11, 2024 | Dec 19, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.145-94.156Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.336-255.557Upgrade kernel-livepatch-5.15.145-95.156Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.205-194.804Upgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.205-195.804Upgrade bpftool-debuginfo | Jan 10, 2024 | Dec 19, 2023 |
| Amazon_linux | — | Upgrade kernel | Feb 6, 2024 | Dec 19, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel | Feb 17, 2025 | Nov 29, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Mar 13, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Mar 13, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | May 31, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Mar 13, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Feb 12, 2024 | Dec 19, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 11, 2024 | Nov 29, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Feb 22, 2024 | Dec 19, 2023 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-rt-debuginfo-common-x86_64 | Apr 8, 2024 | Dec 19, 2023 |
| Suse | — | Upgrade kernel-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade dtb-amazonUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade kernel-default-manUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade kernel-syms-azureUpgrade dlm-kmp-defaultUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-altera | Jan 17, 2024 | Dec 19, 2023 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1122-azureUpgrade linux-image-5.15.0-92-genericUpgrade linux-image-5.4.0-1029-iotUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-5.4.0-170-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-4.15.0-221-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1036-xilinx-zynqmpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1012-awsUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1084-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-6.2.0-1015-nvidiaUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.2.0-1015-nvidia-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.5.0-15-genericUpgrade linux-image-5.4.0-1117-awsUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-15-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-oracleUpgrade linux-image-5.4.0-170-lowlatencyUpgrade linux-image-4.15.0-1127-oracleUpgrade linux-image-6.5.0-1011-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1173-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.5.0-1008-laptopUpgrade linux-image-4.15.0-1164-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1148-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-4.4.0-1165-awsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-azureUpgrade linux-image-4.15.0-1158-gcpUpgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1101-raspiUpgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-6.5.0-1011-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1019-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1064-ibmUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-1018-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.5.0-15-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-6.2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1121-gcpUpgrade linux-image-5.4.0-1105-kvmUpgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-5.4.0-1116-oracleUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-1014-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1009-raspiUpgrade linux-image-6.5.0-1013-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.4.0-1127-awsUpgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-6.5.0-15-lowlatencyUpgrade linux-image-5.15.0-1052-awsUpgrade linux-image-5.4.0-1077-bluefieldUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.4.0-1128-kvmUpgrade linux-image-4.15.0-221-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.4.0-250-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-250-genericUpgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-hweUpgrade linux-image-starfiveUpgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1006-starfiveUpgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-6.5.0-1011-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1019-azureUpgrade linux-image-5.4.0-170-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.1.0-1029-oemUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1043-nvidia-lowlatency | Jan 26, 2024 | Dec 19, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub