A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.
A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group().
We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64kUpgrade kernelUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-coreUpgrade bpftoolUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-uki-virtUpgrade kernel-64k-modules-extraUpgrade kernel-devel-matchedUpgrade rvUpgrade kernel-tools-libs-devel | Apr 11, 2024 | Dec 19, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.205-195.804Upgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.145-94.156Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.205-194.804Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.336-255.557Upgrade kernel-livepatch-5.15.145-95.156 | Jan 10, 2024 | Dec 19, 2023 |
| Amazon_linux | — | Upgrade kernel | Feb 6, 2024 | Dec 19, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.72-96.166Upgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-common | Feb 17, 2025 | Nov 29, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Mar 13, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Mar 13, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | May 31, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perf | Mar 13, 2024 | Dec 19, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Feb 12, 2024 | Dec 19, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 11, 2024 | Nov 29, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Feb 22, 2024 | Dec 19, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-debuginfo | Apr 8, 2024 | Dec 19, 2023 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-preempt-develUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-azure-baseUpgrade kernel-azureUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade kernel-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-rtUpgrade dtb-amlogicUpgrade kernel-debugUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-default-manUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade kernel-symsUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade dtb-amazonUpgrade kernel-kvmsmall-devel | Jan 17, 2024 | Dec 19, 2023 |
| Ubuntu | — | Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1052-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-4.4.0-250-lowlatencyUpgrade linux-image-5.4.0-1077-bluefieldUpgrade linux-image-5.4.0-1101-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1116-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-6.5.0-1014-oracleUpgrade linux-image-6.5.0-15-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-nvidiaUpgrade linux-image-4.15.0-1158-gcpUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.4.0-170-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-6.1.0-1029-oemUpgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-6.2.0-1019-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1011-gcpUpgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-aws-hweUpgrade linux-image-nvidia-6.2Upgrade linux-image-6.5.0-1011-azure-fdeUpgrade linux-image-intelUpgrade linux-image-5.4.0-1121-gcpUpgrade linux-image-5.4.0-1105-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-6.5.0-1006-starfiveUpgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-4.4.0-1127-awsUpgrade linux-image-6.5.0-1013-oemUpgrade linux-image-4.4.0-1128-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-6.5.0-15-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.2.0-1019-azure-fdeUpgrade linux-image-6.5.0-1009-raspiUpgrade linux-image-6.2.0-1018-awsUpgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.4.0-250-genericUpgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-4.15.0-221-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1064-ibmUpgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-6.5.0-1008-laptopUpgrade linux-image-5.4.0-1036-xilinx-zynqmpUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1054-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1148-kvmUpgrade linux-image-gcpUpgrade linux-image-5.4.0-170-lowlatencyUpgrade linux-image-6.2.0-1015-nvidia-64kUpgrade linux-image-6.5.0-15-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1084-gkeopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.5.0-1012-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1127-oracleUpgrade linux-image-raspi2Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-15-lowlatency-64kUpgrade linux-image-6.5.0-1011-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-4.15.0-1164-awsUpgrade linux-image-4.15.0-1173-azureUpgrade linux-image-oem-osp1Upgrade linux-image-6.2.0-1015-nvidiaUpgrade linux-image-4.4.0-1165-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-170-generic-lpaeUpgrade linux-image-5.15.0-92-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-221-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1029-iotUpgrade linux-image-5.4.0-1117-awsUpgrade linux-image-laptop-23.10Upgrade linux-image-5.4.0-1122-azure | Jan 26, 2024 | Dec 19, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub