The perf_trace_event_perm function in kernel/trace/trace_event_perf.c in the Linux kernel before 3.12.2 does not properly restrict access to the perf subsystem, which allows local users to enable function tracing via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 4.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Nov 12, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 9, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Dec 9, 2013 |
| Suse | — | Upgrade kernel-pae-develUpgrade kernel-xenUpgrade kernel-ec2-develUpgrade kernel-xen-develUpgrade kernel-ec2Upgrade cluster-network-kmp-traceUpgrade drbd-kmp-rtUpgrade kernel-xen-extraUpgrade kernel-symsUpgrade cluster-network-kmp-rtUpgrade kernel-default-baseUpgrade kernel-paeUpgrade iscsitarget-kmp-rtUpgrade cluster-network-kmp-xenUpgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-traceUpgrade kernel-xen-baseUpgrade sle-hae-releaseUpgrade kernel-pae-baseUpgrade lttng-modules-kmp-rt_traceUpgrade ocfs2-kmp-defaultUpgrade iscsitarget-kmp-rt_traceUpgrade ocfs2-kmp-rt_traceUpgrade cluster-network-kmp-ppc64Upgrade gfs2-kmp-xenUpgrade cluster-network-kmp-paeUpgrade drbd-kmp-rt_traceUpgrade ocfs2-kmp-rtUpgrade kernel-bigsmp-develUpgrade cluster-network-kmp-bigsmpUpgrade kernel-default-develUpgrade kernel-trace-baseUpgrade kernel-trace-develUpgrade kernel-default-extraUpgrade kernel-bigsmpUpgrade kernel-traceUpgrade xen-kmp-defaultUpgrade ofed-kmp-rtUpgrade ocfs2-kmp-xenUpgrade kernel-rt_traceUpgrade kernel-ec2-baseUpgrade gfs2-kmp-paeUpgrade ocfs2-kmp-ppc64Upgrade gfs2-kmp-defaultUpgrade gfs2-kmp-ppc64Upgrade kernel-bigsmp-baseUpgrade xen-kmp-paeUpgrade ocfs2-kmp-paeUpgrade kernel-ppc64Upgrade kernel-ppc64-develUpgrade kernel-default-manUpgrade kernel-rtUpgrade kernel-rt-baseUpgrade kernel-ppc64-baseUpgrade ocfs2-kmp-bigsmpUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade ofed-kmp-rt_traceUpgrade gfs2-kmp-bigsmpUpgrade kernel-rt_trace-baseUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade gfs2-kmp-traceUpgrade kernel-pae-extraUpgrade kernel-rt_trace-develUpgrade kernel-rt-develUpgrade cluster-network-kmp-rt_traceUpgrade lttng-modules-kmp-rt | Feb 5, 2014 | Dec 9, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-45-powerpc-smpUpgrade linux-image-3.5.0-45-powerpc64-smpUpgrade linux-image-3.8.0-36-genericUpgrade linux-image-3.5.0-45-genericUpgrade linux-image-3.5.0-237-omap4Upgrade linux-image-3.11.0-15-genericUpgrade linux-image-3.11.0-15-generic-lpaeUpgrade linux-image-3.5.0-45-highbankUpgrade linux-image-3.5.0-45-omap | Nov 8, 2024 | Dec 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub