The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-vserver.Upgrade linux-grsec | Aug 30, 2017 | May 14, 2013 |
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-firmwareUpgrade kernel-docUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel | Dec 1, 2016 | May 14, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 14, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 23, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | May 14, 2013 |
| Suse | — | Upgrade ofed-kmp-rt_traceUpgrade kernel-vanilla-devel-debuginfoUpgrade drbd-kmp-rt_traceUpgrade kernel-debugUpgrade sle-hae-releaseUpgrade kernel-xen-debuginfoUpgrade cluster-network-kmp-rt_traceUpgrade kernel-default-devel-debuginfoUpgrade cluster-network-kmp-paeUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-xen-devel-debuginfoUpgrade kernel-defaultUpgrade kernel-pae-extraUpgrade cluster-network-kmp-xenUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-paeUpgrade iscsitarget-kmp-rt_traceUpgrade cluster-network-kmp-rtUpgrade kernel-xen-debugsourceUpgrade kernel-rt_traceUpgrade kernel-debug-devel-debuginfoUpgrade kernel-trace-devel-debuginfoUpgrade kernel-desktop-develUpgrade kernel-default-debuginfoUpgrade kernel-trace-debuginfoUpgrade kernel-trace-baseUpgrade kernel-trace-base-debuginfoUpgrade cluster-network-kmp-ppc64Upgrade kernel-pae-base-debuginfoUpgrade ocfs2-kmp-xenUpgrade kernel-xen-base-debuginfoUpgrade ocfs2-kmp-ppc64Upgrade kernel-debug-develUpgrade kernel-vanilla-debugsourceUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade xen-kmp-paeUpgrade kernel-rt-develUpgrade iscsitarget-kmp-rtUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-ppc64Upgrade kernel-vanilla-develUpgrade kernel-rt-baseUpgrade kernel-ec2-baseUpgrade kernel-ec2-extra-debuginfoUpgrade gfs2-kmp-xenUpgrade kernel-pae-debugsourceUpgrade kernel-trace-debugsourceUpgrade gfs2-kmp-defaultUpgrade kernel-trace-extraUpgrade kernel-pae-develUpgrade xen-kmp-traceUpgrade kernel-default-base-debuginfoUpgrade kernel-ec2-extraUpgrade ofed-kmp-rtUpgrade xen-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade cluster-network-kmp-traceUpgrade kernel-desktop-debuginfoUpgrade kernel-ec2-debugsourceUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-ppc64Upgrade ocfs2-kmp-rt_traceUpgrade gfs2-kmp-traceUpgrade kernel-default-extraUpgrade kernel-paeUpgrade lttng-modules-kmp-rtUpgrade ocfs2-kmp-paeUpgrade kernel-pae-debuginfoUpgrade drbd-kmp-rtUpgrade kernel-xen-extraUpgrade kernel-desktop-base-debuginfoUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-ppc64-develUpgrade kernel-pae-devel-debuginfoUpgrade kernel-symsUpgrade kernel-rt_trace-develUpgrade kernel-ec2-base-debuginfoUpgrade ocfs2-kmp-traceUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-xen-baseUpgrade kernel-xenUpgrade kernel-desktop-baseUpgrade kernel-desktopUpgrade kernel-ec2-develUpgrade kernel-desktop-debugsourceUpgrade kernel-rt_trace-baseUpgrade kernel-rtUpgrade kernel-ec2Upgrade cluster-network-kmp-defaultUpgrade kernel-default-debugsourceUpgrade kernel-ec2-debuginfoUpgrade kernel-debug-baseUpgrade kernel-debug-debugsourceUpgrade kernel-xen-develUpgrade kernel-sourceUpgrade kernel-ppc64-baseUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-default-manUpgrade kernel-debug-base-debuginfoUpgrade kernel-syms-rtUpgrade kernel-vanilla-debuginfoUpgrade ocfs2-kmp-rtUpgrade kernel-pae-baseUpgrade kernel-default-develUpgrade kernel-traceUpgrade kernel-vanillaUpgrade kernel-debug-debuginfo | Feb 17, 2015 | May 14, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-43-highbankUpgrade linux-image-3.5.0-225-omap4Upgrade linux-image-3.5.0-30-powerpc64-smpUpgrade linux-image-3.2.0-43-powerpc64-smpUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-3.2.0-43-genericUpgrade linux-image-3.2.0-43-virtualUpgrade linux-image-3.5.0-30-powerpc-smpUpgrade linux-image-3.8.0-21-genericUpgrade linux-image-3.2.0-43-powerpc-smpUpgrade linux-image-3.2.0-43-generic-paeUpgrade linux-image-3.2.0-1432-omap4Upgrade linux-image-3.5.0-30-highbankUpgrade linux-image-3.2.0-43-omapUpgrade linux-image-3.5.0-30-omapUpgrade linux-image-3.5.0-30-generic | Nov 8, 2024 | May 14, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub