The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by adding a hardware event to an event group led by a software event.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 25, 2013 |
| Suse | — | Upgrade kernel-develUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-ec2Upgrade kernel-paeUpgrade kernel-source-vanillaUpgrade kernel-desktopUpgrade kernel-traceUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-debug-baseUpgrade kernel-default-develUpgrade kernel-vanillaUpgrade kernel-symsUpgrade kernel-vanilla-develUpgrade kernel-docsUpgrade kernel-desktop-develUpgrade kernel-ec2-baseUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-ec2-develUpgrade kernel-pae-develUpgrade kernel-defaultUpgrade kernel-pae-baseUpgrade kernel-desktop-baseUpgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-trace-devel | Feb 17, 2015 | Aug 24, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-54-genericUpgrade linux-image-3.2.0-1438-omap4Upgrade linux-image-3.5.0-233-omap4Upgrade linux-image-3.5.0-41-powerpc-smpUpgrade linux-image-3.8.0-31-genericUpgrade linux-image-3.2.0-54-highbankUpgrade linux-image-3.5.0-41-genericUpgrade linux-image-3.2.0-54-powerpc64-smpUpgrade linux-image-3.2.0-54-virtualUpgrade linux-image-3.5.0-41-highbankUpgrade linux-image-3.2.0-54-generic-paeUpgrade linux-image-3.5.0-41-omapUpgrade linux-image-3.2.0-54-omapUpgrade linux-image-3.5.0-41-powerpc64-smpUpgrade linux-image-3.2.0-54-powerpc-smp | Nov 8, 2024 | Aug 25, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub