USN-1881-1: Linux kernel vulnerabilities

Andy Lutomirski discover an error in the Linux kernel's credential handling on unix sockets. A local user could exploit this flaw to gain administrative privileges. CVE-2013-1979 An information leak was discovered in the Linux kernel when inotify is used to monitor the /dev/ptmx device. A local...

USN-1879-1: Linux kernel (OMAP4) vulnerabilities

Kees Cook discovered a flaw in the Linux kernel's iSCSI subsystem. A remote unauthenticated attacker could exploit this flaw to cause a denial of service system crash or potentially gain administrative privileges. CVE-2013-2850 An information leak was discovered in the Linux kernel when inotify i...

USN-1878-1: Linux kernel vulnerabilities

An information leak was discovered in the Linux kernel when inotify is used to monitor the /dev/ptmx device. A local user could exploit this flaw to discover keystroke timing and potentially discover sensitive information like password length. CVE-2013-0160 A flaw was discovered in the Linux...

PT-2013-6365

Уязвимость функции perf swevent init ядра операционной системы Linux связана с недостатками контроля доступа. Эксплуатация уязвимости может позволить нарушителю получить права суперпользователя...

kernel: security and bugfix update (critical)

The openSUSE 12.3 kernel was updated to fix a critical security issue, other security issues and several bugs. Security issues fixed: CVE-2013-2094: The perfsweventinit function in kernel/events/core.c in the Linux kernel used an incorrect integer data type, which allowed local users to gain...

Design/Logic Flaw

The perf subsystem in the kernel package 2.6.32-122.el6.x8664 in Red Hat Enterprise Linux RHEL 6 does not properly handle NMIs, which might allow local users to cause a denial of service excessive log messages via unspecified vectors...

CVE-2011-2693

The perf subsystem in the kernel package 2.6.32-122.el6.x8664 in Red Hat Enterprise Linux RHEL 6 does not properly handle NMIs, which might allow local users to cause a denial of service excessive log messages via unspecified vectors...

PT-2013-1399 · Red Hat · Red Hat

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux RHEL 6 kernel package version 2.6.32-122.el6.x86 64 Description: The perf subsystem in the kernel does not properly handle Non-Maskable Interrupts NMIs, which could allow local users to cause a denial of service by...

CVE-2011-2693: Undefined Security Weakness

The perf subsystem in the kernel package 2.6.32-122.el6.x8664 in Red Hat Enterprise Linux RHEL 6 does not properly handle NMIs, which might allow local users to cause a denial of service excessive log messages via unspecified vectors...

SuSE 11.2 Security Update : Linux Kernel (SAT Patch Numbers 7723 / 7726 / 7727)

This update to the SUSE Linux Enterprise 11 SP2 kernel fixes the following critical security issue : - A bounds checking problem in the perf systemcall could be used by local attackers to crash the kernel or execute code in kernel context. CVE-2013-2094 %NASLMINLEVEL 70300 C Tenable Network...

kernel: perf_swevent_enabled array out-of-bound access

The perfsweventinit function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perfeventopen system call...

kernel: perf_swevent_enabled array out-of-bound access

The perfsweventinit function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perfeventopen system call...

VulnCheck KEV: CVE-2013-2094

Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perfsweventenabled array in swperfeventdestroy. Explotation allows for privilege escalation...

kernel: perf_swevent_enabled array out-of-bound access

The perfsweventinit function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perfeventopen system call...

USN-1826-1: Linux kernel vulnerability

An flaw was discovered in the Linux kernel's perfevents interface. A local user could exploit this flaw to escalate privileges on the system...

Unbreakable Enterprise kernel Security update

2.6.39-400.24.1 - perf: Treat attr.config as u64 in perfsweventinit Tommi Rantala Orabug: 16808734 CVE-2013-2094...

AZL-34846 CVE-2013-2094 affecting package kernel for versions less than 6.6.22.1-2

The perfsweventinit function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perfeventopen system call...

AZL-34322 CVE-2013-2094 affecting package kernel for versions less than 5.15.153.1-1

The perfsweventinit function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perfeventopen system call...

DEBIAN-CVE-2013-2094

The perfsweventinit function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perfeventopen system call...

Linux Kernel 2.6.32 < 3.x (CentOS 5/6) - 'PERF_EVENTS' Local Privilege Escalation (1)

/ linux 2.6.37-3.x.x x8664, 100 LOC gcc-4.6 -O2 semtex.c && ./a.out 2010 [email protected], salut! update may 2013: seems like centos 2.6.32 backported the perf bug, lol. jewgold to 115T6jzGrVMgQ2Nt1Wnua7Ch1EuL9WXT2g if you insist. EDB Note: Update...