A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation.
The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remove_on_exec made it possible to call list_del_event() on before detaching from their group, making it possible to use a dangling pointer causing a use-after-free vulnerability.
We recommend upgrading past commit fd0815f632c24878e325821943edccc7fde947a2.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-uki-virtUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-docUpgrade kernel-debug-uki-virtUpgrade perfUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade bpftoolUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-64k-modules-coreUpgrade rtlaUpgrade kernel-64k-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-64kUpgrade kernel-debugUpgrade kernel-64k-develUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modules | Jul 12, 2023 | May 1, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.104-63.140Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perfUpgrade perf | Jun 7, 2023 | May 1, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-livepatch-6.1.21-1.45Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfo | Feb 17, 2025 | Mar 15, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kernel | Jun 22, 2023 | May 1, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 1, 2023 |
| Oracle_linux | — | Upgrade kernel | Jul 25, 2023 | Mar 15, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 22, 2023 | May 1, 2023 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade perfUpgrade kernel-rt-devel | Mar 5, 2024 | May 1, 2023 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade dtb-amdUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade kernel-docsUpgrade kernel-macrosUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-lgUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade dtb-appleUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-64kb-extra | May 10, 2023 | May 1, 2023 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1042-awsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1039-gcpUpgrade linux-image-5.15.0-1041-awsUpgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1005-awsUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.15.0-1035-ibmUpgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1030-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1035-raspiUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1037-intel-iotgUpgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-79-generic-lpaeUpgrade linux-image-5.15.0-1025-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-79-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1030-nvidia-lowlatencyUpgrade linux-image-6.2.0-23-genericUpgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-5.15.0-79-lowlatency-64kUpgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-5.15.0-79-genericUpgrade linux-image-intelUpgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1040-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1039-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1043-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1039-gkeUpgrade linux-image-6.2.0-1006-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1005-azureUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-5.15.0-79-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic | Jun 19, 2023 | May 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub