A heap out-of-bounds write vulnerability in the Linux kernel’s Performance
Events system component can be exploited to achieve local privilege
escalation. A perf_event’s read_size can overflow, leading to an heap
out-of-bounds increment or write in perf_read_group(). We recommend
upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.
Author | Note |
---|---|
Priority reason: On 4.4 kernels, it is still possible to use perf_event_open by default for software events. | |
sbeattie | 7e2c1e4b34f0 (“perf: Fix perf_event_validate_size() lockdep splat”) is a followup lockdep fix for 382c27f4ed28 (“perf: Fix perf_event_validate_size()”) |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 16.04 | noarch | linux-hwe | < 4.15.0-221.232~16.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 18.04 | noarch | linux-hwe-5.4 | < 5.4.0-170.188~18.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 20.04 | noarch | linux-hwe-5.15 | < 5.15.0-92.102~20.04.1 | UNKNOWN |
ubuntu | 14.04 | noarch | linux-lts-xenial | < 4.4.0-250.284~14.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 20.04 | noarch | linux-kvm | < 5.4.0-1105.112 | UNKNOWN |
ubuntu | 22.04 | noarch | linux-kvm | < 5.15.0-1049.54 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-kvm | < 4.15.0-1148.153) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 16.04 | noarch | linux-kvm | < 4.4.0-1128.138) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws-5.4 | < 5.4.0-1117.127~18.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws-5.15 | < 5.15.0-1052.57~20.04.1 | UNKNOWN |
git.kernel.org/linus/382c27f4ed28f803b1f1473ac2d8db0afc795a1b (6.7-rc5)
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b
kernel.dance/382c27f4ed28f803b1f1473ac2d8db0afc795a1b
launchpad.net/bugs/cve/CVE-2023-6931
nvd.nist.gov/vuln/detail/CVE-2023-6931
security-tracker.debian.org/tracker/CVE-2023-6931
ubuntu.com/security/notices/USN-6602-1
ubuntu.com/security/notices/USN-6603-1
ubuntu.com/security/notices/USN-6604-1
ubuntu.com/security/notices/USN-6604-2
ubuntu.com/security/notices/USN-6605-1
ubuntu.com/security/notices/USN-6605-2
ubuntu.com/security/notices/USN-6606-1
ubuntu.com/security/notices/USN-6607-1
ubuntu.com/security/notices/USN-6608-1
ubuntu.com/security/notices/USN-6608-2
ubuntu.com/security/notices/USN-6609-1
ubuntu.com/security/notices/USN-6609-2
ubuntu.com/security/notices/USN-6609-3
ubuntu.com/security/notices/USN-6628-1
ubuntu.com/security/notices/USN-6628-2
ubuntu.com/security/notices/USN-6635-1
www.cve.org/CVERecord?id=CVE-2023-6931