CVE-2013-2094

Known Exploited (CISA KEV)HIGH

8.4

CVSS Severity Score

EPSS Score60.3810%

EPSS Percentile94.11th

Published2013年5月14日

Last Modified2026年4月22日

Vulnerability Description

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.

Affected Platforms (CPE)

💻

Linux

Linux Kernel

< 3.0.75

💻

Linux

Linux Kernel

>= 3.1 and < 3.2.45

💻

Linux

Linux Kernel

>= 3.3 and < 3.4.42

💻

Linux

Linux Kernel

>= 3.5 and < 3.8.9

References & Advisories

🔗 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8176cced706b5e5d15887584150764894e94e02f

🔗 http://lists.centos.org/pipermail/centos-announce/2013-May/019729.html

🔗 http://lists.centos.org/pipermail/centos-announce/2013-May/019733.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00008.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00009.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00017.html

Vulnerability Description

Affected Platforms (CPE)

Linux Kernel

Linux Kernel

Linux Kernel

Linux Kernel

References & Advisories

相關漏洞威脅