A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.
If perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer.
We recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-docUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules | Feb 23, 2024 | Oct 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-4.14.328-248.540Upgrade kernelUpgrade kernel-livepatch-5.10.199-190.747Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.137-91.144Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfo | Nov 16, 2023 | Oct 25, 2023 |
| Amazon_linux | — | Upgrade kernel | Dec 5, 2023 | Oct 25, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.59-84.139Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.52-71.125Upgrade kernel-livepatch-6.1.56-82.125Upgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-livepatch-6.1.49-70.116Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-livepatch-6.1.61-85.141 | Feb 17, 2025 | Oct 25, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Oct 25, 2023 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 10, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Mar 13, 2024 | Oct 25, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jan 10, 2024 | Oct 25, 2023 |
| Oracle_linux | — | Upgrade kernel | Feb 23, 2024 | Oct 25, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jan 26, 2024 | Oct 25, 2023 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdump-manUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-baseUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-default-manUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade kernel-preempt-develUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-debug-baseUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade kernel-devel-rtUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kb | Dec 13, 2023 | Oct 25, 2023 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1115-oracleUpgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-5.4.0-1121-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1172-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-1035-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.5.0-1009-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-4.4.0-248-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-169-genericUpgrade linux-image-4.15.0-220-lowlatencyUpgrade linux-image-4.15.0-1163-awsUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1076-bluefieldUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-4.4.0-1125-awsUpgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1157-gcpUpgrade linux-image-6.5.0-1005-starfiveUpgrade linux-image-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1116-awsUpgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-4.4.0-1163-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-1126-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-6.5.0-1010-azure-fdeUpgrade linux-image-starfiveUpgrade linux-image-4.4.0-1126-kvmUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1120-gcpUpgrade linux-image-5.15.0-1051-awsUpgrade linux-image-6.5.0-1010-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1083-gkeopUpgrade linux-image-6.5.0-14-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-raspi2Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-169-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-4.15.0-220-genericUpgrade linux-image-kvmUpgrade linux-image-5.15.0-91-genericUpgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-6.2.0-1017-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-14-lowlatencyUpgrade linux-image-6.5.0-14-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-6.5.0-14-generic-64kUpgrade linux-image-4.4.0-248-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-osp1Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1028-iotUpgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-6.5.0-1008-raspiUpgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-6.5.0-1011-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1053-azureUpgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-laptop-23.10Upgrade linux-image-oem-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.1.0-1026-oemUpgrade linux-image-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.5.0-1013-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1018-azureUpgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.15.0-1147-kvmUpgrade linux-image-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.5.0-1007-laptopUpgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-nolpae | Nov 22, 2023 | Oct 25, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub