A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.
If perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer.
We recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade bpftoolUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-zfcpdump-devel | Feb 23, 2024 | Oct 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade python-perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.199-190.747Upgrade kernel-livepatch-4.14.328-248.540Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.137-91.144 | Nov 16, 2023 | Oct 25, 2023 |
| Amazon_linux | — | Upgrade kernel | Dec 5, 2023 | Oct 25, 2023 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-livepatch-6.1.61-85.141Upgrade kernel-headersUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.59-84.139Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.56-82.125Upgrade kernel-libbpfUpgrade kernel-livepatch-6.1.52-71.125Upgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-develUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.49-70.116 | Feb 17, 2025 | Oct 25, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Oct 25, 2023 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Jan 10, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-devel | Mar 13, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Jan 10, 2024 | Oct 25, 2023 |
| Oracle_linux | — | Upgrade kernel | Feb 23, 2024 | Oct 25, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jan 26, 2024 | Oct 25, 2023 |
| Suse | — | Upgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade dtb-mediatekUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-debug-baseUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-qcomUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-preemptUpgrade dtb-amdUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-zfcpdump-manUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-baseUpgrade dtb-socionextUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade dtb-renesasUpgrade kernel-preempt-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-altera | Dec 13, 2023 | Oct 25, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-169-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-intelUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-6.5.0-1010-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-248-lowlatencyUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1009-oemUpgrade linux-image-5.4.0-1115-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1126-oracleUpgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-4.15.0-220-lowlatencyUpgrade linux-image-5.4.0-1120-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-4.4.0-1126-kvmUpgrade linux-image-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1163-awsUpgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-4.4.0-1163-awsUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1005-starfiveUpgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1010-azure-fdeUpgrade linux-image-5.15.0-1051-awsUpgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-5.4.0-1121-azureUpgrade linux-image-5.4.0-1035-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-5.4.0-1076-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-4.15.0-1172-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1125-awsUpgrade linux-image-5.4.0-1116-awsUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-6.5.0-14-genericUpgrade linux-image-5.4.0-169-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-1157-gcpUpgrade linux-image-aws-hweUpgrade linux-image-starfiveUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1083-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-1017-awsUpgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-6.5.0-1007-laptopUpgrade linux-image-bluefieldUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.1.0-1026-oemUpgrade linux-image-5.4.0-1028-iotUpgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.5.0-14-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-kvmUpgrade linux-image-4.15.0-220-genericUpgrade linux-image-6.5.0-1011-awsUpgrade linux-image-6.5.0-1008-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-91-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-6.2.0-1018-azureUpgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-6.5.0-1013-oracleUpgrade linux-image-4.15.0-1147-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1053-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-laptop-23.10Upgrade linux-image-4.4.0-248-genericUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-6.5.0-14-lowlatencyUpgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-6.5.0-14-generic-64kUpgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-6.2.0-39-generic-64k | Nov 22, 2023 | Oct 25, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub