A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.
If perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer.
We recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extra | Feb 23, 2024 | Oct 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.328-248.540Upgrade kernel-livepatch-5.10.199-190.747Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.137-91.144Upgrade perfUpgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Nov 16, 2023 | Oct 25, 2023 |
| Amazon_linux | — | Upgrade kernel | Dec 5, 2023 | Oct 25, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-6.1.61-85.141Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.49-70.116Upgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.59-84.139Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.49-69.116Upgrade python3-perf-debuginfoUpgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.56-82.125Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.52-71.125Upgrade kernel-livepatch-6.1.55-75.123 | Feb 17, 2025 | Oct 25, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Oct 25, 2023 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Jan 10, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perfUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade kernel-headers | Mar 13, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 10, 2024 | Oct 25, 2023 |
| Oracle_linux | — | Upgrade kernel | Feb 23, 2024 | Oct 25, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jan 26, 2024 | Oct 25, 2023 |
| Suse | — | Upgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade dtb-marvellUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-azure-baseUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdump-manUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-preempt-develUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-debug-baseUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-default-manUpgrade dtb-apmUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-armUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade kernel-rtUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-syms | Dec 13, 2023 | Oct 25, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-4.15.0-1147-kvmUpgrade linux-image-laptop-23.10Upgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1013-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1008-raspiUpgrade linux-image-4.15.0-220-genericUpgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1011-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-oemUpgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-bluefieldUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-gcpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-91-genericUpgrade linux-image-6.1.0-1026-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1028-iotUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.5.0-14-generic-64kUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-virtualUpgrade linux-image-6.5.0-14-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.5.0-1007-laptopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-1017-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1053-azureUpgrade linux-image-4.4.0-248-genericUpgrade linux-image-6.2.0-1018-azureUpgrade linux-image-6.5.0-14-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-6.5.0-1010-azure-fdeUpgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1076-bluefieldUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-4.4.0-1126-kvmUpgrade linux-image-5.4.0-1120-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-6.5.0-14-genericUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1010-azureUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-4.15.0-1163-awsUpgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-4.4.0-1125-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04cUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1115-oracleUpgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1157-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-5.15.0-1051-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-1163-awsUpgrade linux-image-5.4.0-1121-azureUpgrade linux-image-starfiveUpgrade linux-image-5.4.0-169-genericUpgrade linux-image-nvidia-6.2Upgrade linux-image-aws-hweUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-raspi2Upgrade linux-image-intelUpgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-4.15.0-1172-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1083-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1126-oracleUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-6.5.0-1009-oemUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-220-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1116-awsUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-6.5.0-1005-starfiveUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-248-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-169-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-nvidia | Nov 22, 2023 | Oct 25, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub