kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

Malicious Package

Overview perf-benchmarks is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

Malicious code in perf-benchmarks-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 776b6ef381784498b8b7f8ab12eea08d62b43ed272efcd4046efcdcf4bff712d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5278 Malicious code in perf-benchmarks-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 776b6ef381784498b8b7f8ab12eea08d62b43ed272efcd4046efcdcf4bff712d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nf-falcor-device-perf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 875e0d6c4e1161bdf00bac7e372d3ce31d5d4e416acdadd8120986d516bfb233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4836 Malicious code in nf-falcor-device-perf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 875e0d6c4e1161bdf00bac7e372d3ce31d5d4e416acdadd8120986d516bfb233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-perf-measure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476e2d289f8d884842c959d7088338d3aec3ce688bcef6532f6ca377960a9d8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-ai-text-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f1f588c99277332d2d7ec961811565a2954f8ef2e6d10eda59d3b0940b09eae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5286 Malicious code in perf-keyvault-certificates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9003463e95619d4e40f5507d682e1e9f6c51dfe0d607c8397e22babb820bd8d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5281 Malicious code in perf-data-tables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dbafd7f735f6fa5bec3af236673c8d99293ed8731c9e57fe12120420d23582f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-keyvault-certificates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9003463e95619d4e40f5507d682e1e9f6c51dfe0d607c8397e22babb820bd8d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-keyvault-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ba3ff274677edafd94d8d2a447ff201db5d546d8ae4a87e38723189c151d6a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-data-tables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dbafd7f735f6fa5bec3af236673c8d99293ed8731c9e57fe12120420d23582f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5287 Malicious code in perf-keyvault-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ba3ff274677edafd94d8d2a447ff201db5d546d8ae4a87e38723189c151d6a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5276 Malicious code in perf-ai-text-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f1f588c99277332d2d7ec961811565a2954f8ef2e6d10eda59d3b0940b09eae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-ai-form-recognizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a36f25e3ae0774dd3216fc9445ec5bb0caa07c12d838c7365081da09638aa754 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-eventgrid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2800edb223942c78ef7e95d85fa4171c414be93f3bfbe2fb7cf07f5e9cdaed4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-keyvault-secrets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e52e7851b3adaafd64c17c5ca82e39af754c9344a91b8fb551136e37387c45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...