kernel: perf_event_parse_addr_filter memory

A memory leak flaw was found in the Linux kernel’s performance monitoring subsystem when using PERFEVENTIOCSETFILTER. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability...

SUSE-SU-2018:0582-1 Security update for the Linux Kernel (Live Patch 17 for SLE 12 SP2)

This update for the Linux Kernel 4.4.103-9256 fixes several issues. The following security issue was fixed: - CVE-2017-18075: crypto/pcrypt.c in the Linux kernel mishandled freeing instances, allowing a local user able to access the AFALG-based AEAD interface CONFIGCRYPTOUSERAPIAEAD and pcrypt...

CVE-2017-0403: Undefined Security Weakness

An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

Google Android kernel performance subsystem elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which the Kernel Performance Subsystem is a kernel performance component. An elevation of privilege vulnerability exists in the kernel performance subsystem in Android. The...

UBUNTU-CVE-2016-3843

Android before 2016-08-05 does not properly restrict code execution in a kernel context, which allows attackers to gain privileges via a crafted application, as demonstrated by the kernel performance subsystem and the Qualcomm performance component, aka Android internal bugs 28086229 and 29119870...

CVE-2016-3843: Undefined Security Weakness

Android before 2016-08-05 does not properly restrict code execution in a kernel context, which allows attackers to gain privileges via a crafted application, as demonstrated by the kernel performance subsystem and the Qualcomm performance component, aka Android internal bugs 28086229 and 29119870...

CVE-2011-3542

Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to Kernel/Performance Counter BackEnd Module pcbe...

CVE-2011-3542

Oracle Solaris 10/11 Express has an unresolved, unspecified vulnerability in the Kernel/Performance Counter BackEnd Module (pcbe) that can impact availability for local users. The CVE-2011-3542 entry notes an unknown vector; Oracle’s October 2011 CPU advisory contains fixes for Solaris kernel com...

CVE-2011-3542: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to Kernel/Performance Counter BackEnd Module pcbe...