A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.
A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group().
We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-develUpgrade kernel-debugUpgrade kernel-coreUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-64kUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade perfUpgrade rvUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-debugUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-core | Apr 11, 2024 | Dec 19, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.336-255.557Upgrade kernel-livepatch-5.15.145-94.156Upgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.205-194.804Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.205-195.804Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-devel | Jan 10, 2024 | Dec 19, 2023 |
| Amazon_linux | — | Upgrade kernel | Feb 6, 2024 | Dec 19, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Nov 29, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 13, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Mar 13, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | May 31, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs | Mar 13, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Feb 12, 2024 | Dec 19, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 11, 2024 | Nov 29, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Feb 22, 2024 | Dec 19, 2023 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-tools-libs | Apr 8, 2024 | Dec 19, 2023 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade dtb-qcomUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade kernel-preemptUpgrade dtb-exynosUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-rt-vdsoUpgrade dtb-lgUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-azure-baseUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-preempt-develUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade kselftests-kmp-rtUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch | Jan 17, 2024 | Dec 19, 2023 |
| Ubuntu | — | Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1084-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-6.2.0-1015-nvidia-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-5.4.0-1029-iotUpgrade linux-image-5.4.0-170-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1165-awsUpgrade linux-image-6.5.0-15-lowlatency-64kUpgrade linux-image-4.15.0-1173-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-92-genericUpgrade linux-image-6.5.0-1011-azureUpgrade linux-image-5.4.0-170-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-4.15.0-1127-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-6.5.0-15-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1036-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.5.0-1008-laptopUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-4.15.0-1164-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1117-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1148-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-221-genericUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1122-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oemUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.2.0-1015-nvidiaUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1012-awsUpgrade linux-image-nvidia-6.2Upgrade linux-image-6.5.0-1014-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-6.5.0-1011-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.4.0-1116-oracleUpgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-170-genericUpgrade linux-image-6.1.0-1029-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-hweUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1013-oemUpgrade linux-image-4.4.0-250-genericUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1009-raspiUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-5.15.0-1052-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.15.0-1158-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1019-azure-fdeUpgrade linux-image-6.5.0-1011-azure-fdeUpgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1101-raspiUpgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-6.5.0-15-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1105-kvmUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-oem-22.04aUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-5.4.0-1121-gcpUpgrade linux-image-4.4.0-1128-kvmUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-6.5.0-1006-starfiveUpgrade linux-image-azureUpgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1077-bluefieldUpgrade linux-image-4.15.0-221-lowlatencyUpgrade linux-image-4.4.0-250-lowlatencyUpgrade linux-image-5.4.0-1064-ibmUpgrade linux-image-6.5.0-15-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1019-azureUpgrade linux-image-6.2.0-1018-awsUpgrade linux-image-4.4.0-1127-awsUpgrade linux-image-oem-22.04b | Jan 26, 2024 | Dec 19, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub