8.4Hoch KEV

CVE-2013-2094Linux Kernel Privilege Escalation Vulnerability

linux linux kernel Veröffentlicht: 2013-05-14 23:00 (vor 13 Jahren)

Bekannt ausgenutzt — Linux Kernel Privilege Escalation Vulnerability

CISA hat am 15.09.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 06.10.2022.

Erforderliche Maßnahme: Apply updates per vendor instructions. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8176cced706b5e5d15887584150764894e94e02f; https://nvd.nist.gov/vuln/detail/CVE-2013-2094

Beschreibung

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.

Schwachstellentyp (CWE): CWE-189

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
linux	linux kernel	< 3.0.75

Referenzen und Patches

openSUSE-SU-2013:0847 vendor-advisoryThird Party AdvisoryVDB Entry
MDVSA-2013:176 vendor-advisoryMailing ListThird Party Advisory
[linux-kernel] 20130413 Re: sw_perf_event_destroy() oops while fuzzing mailing-listThird Party Advisory
[linux-kernel] 20130412 sw_perf_event_destroy() oops while fuzzing mailing-listThird Party AdvisoryVDB Entry
[CentOS-announce] 20130517 CESA-2013:0830 Important CentOS 6 kernel Update mailing-listThird Party AdvisoryVDB Entry
USN-1826-1 vendor-advisoryThird Party Advisory
[linux-kernel] 20130412 Re: sw_perf_event_destroy() oops while fuzzing mailing-listThird Party AdvisoryVDB Entry
USN-1838-1 vendor-advisoryThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=962792 Issue Tracking
https://github.com/torvalds/linux/commit/8176cced706b5e5d15887584150764894e94e02f Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9 Not Applicable
USN-1828-1 vendor-advisoryThird Party Advisory
[CentOS-announce] 20130515 CentOS-6 CVE-2013-2094 Kernel Issue mailing-listThird Party AdvisoryVDB Entry
USN-1827-1 vendor-advisoryThird Party Advisory
USN-1836-1 vendor-advisoryThird Party Advisory
93361 vdb-entryBroken Link
33589 exploitThird Party AdvisoryVDB Entry
RHSA-2013:0830 vendor-advisoryThird Party Advisory
http://news.ycombinator.com/item?id=5703758 Third Party Advisory
[oss-security] 20130514 Re: CVE Request: linux kernel perf out-of-bounds access mailing-listMailing ListThird Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8176cced706b5e5d1588758415076… Not Applicable
SUSE-SU-2013:0819 vendor-advisoryThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/121616/semtex.c ExploitThird Party AdvisoryVDB Entry
openSUSE-SU-2013:0925 vendor-advisoryThird Party AdvisoryVDB Entry
http://twitter.com/djrbliss/statuses/334301992648331267 Patch
http://www.reddit.com/r/netsec/comments/1eb9iw Third Party Advisory
openSUSE-SU-2013:1042 vendor-advisoryThird Party AdvisoryVDB Entry
USN-1825-1 vendor-advisoryThird Party Advisory
openSUSE-SU-2013:0951 vendor-advisoryThird Party AdvisoryVDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2094 US Government Resource

CPE-Treffer (NVD) (4)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* < 3.0.75
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 3.1 < 3.2.45
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 3.3 < 3.4.42
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 3.5 < 3.8.9

CVSS-Score

8.4Hoch

Quelle: CISA-ADP · CVSS 3.1

Angriffsvektor: Lokal
Komplexität: Niedrig
Rechte erforderlich: Keine
Benutzerinteraktion: Keine
Geltungsbereich: Unverändert
Vertraulichkeit: Hoch
Integrität: Hoch
Verfügbarkeit: Hoch

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Alle Scores (3)

CISA-ADP	CVSS 3.1	8.4Hoch
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	8.4Hoch
nvd	CVSS 2.0	7.2Hoch

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

47.71%

höher als 99 % aller CVEs

CISA-Bewertung (SSVC)

Ausnutzung: active
Automatisierbar: no
Technische Auswirkung: total

Zeitverlauf

ID reserviert2013-02-19
Veröffentlicht2013-05-14 23:00
Bei IP-DB eingegangen2026-10-24 23:32
In KEV aufgenommen2022-09-15
Zuletzt aktualisiert2026-06-17 02:52

Vergeben von (CNA): redhat
NVD-Status: Analyzed

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — Linux kernel

8.1Hoch

CVE-2026-99270 vor 2 Tagen

tcp: Fix potential UAF in reqsk_timer_handler().

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler(). When TCP socket migration fails at inet_ehash_insert() in reqsk_timer_handler(), we jump to the no_ownership: label and free the new reqsk i…

7.8Hoch

CVE-2026-99269 vor 2 Tagen

sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs A task can be found on a non-local DSQ while the CPU which dispatched it is still running ops.dequeue() and hasn't clea…

Ohne Score

CVE-2026-99260 vor 2 Tagen

ntfs: fix resident conversion in ntfs_new_attr_flags

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags When setting sparse/compressed flags on a resident attribute, the function skipped the resident-to-non-resident conversion and terminated.

Ohne Score

CVE-2026-99261 vor 2 Tagen

drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction It fixes both the move overflow and the eviction fence add for evicting these per-vm BOs.

Ohne Score

CVE-2026-99257 vor 2 Tagen

gpio: shared: gracefully handle no-device lookup of shared GPIOs

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: gracefully handle no-device lookup of shared GPIOs We use platform lookup tables for shared GPIOs. This mechanism needs a struct device to work so fwnode-based lookup with no …

Ohne Score

CVE-2026-99256 vor 2 Tagen

dm cache: fix issue with background work locking

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm cache used a rw_semaphore for background_work_lock. Write locks on rw_semaphores have strict owner semantics, but there was no guarantee …