Yüksek CISA KEV
CVE-2013-2094: Linux Kernel: aktif olarak istismar edilen açık
Açıklama (NVD)
Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation.
Özet bilgiler
- EPSS
- %47,71 (yüzdelik 99)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2022-09-15 · Son tarih: 2022-10-06
Gerekli aksiyon: Apply updates per vendor instructions.