CVE-2013-2094
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation.
CISA Known Exploited Vulnerability
Vendor / Product
Linux — Kernel
Date Added
2022-09-15
Remediation Due
2022-10-06
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8176cced706b5e5d15887584150764894e94e02f; https://nvd.nist.gov/vuln/detail/CVE-2013-2094
Weakness Classification (1)
Affected Software (4)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | < 3.0.75 |
| linux | linux_kernel | 3.1 – 3.2.45 |
| linux | linux_kernel | 3.3 – 3.4.42 |
| linux | linux_kernel | 3.5 – 3.8.9 |
References & Advisories (30)
US Government Resource
Third Party Advisory
VDB Entry
Third Party Advisory
VDB Entry
Third Party Advisory
VDB Entry
Third Party Advisory
VDB Entry
Third Party Advisory
VDB Entry
Third Party Advisory
VDB Entry
Third Party Advisory
VDB Entry
Third Party Advisory
VDB Entry
Third Party Advisory
VDB Entry
Third Party Advisory
VDB Entry
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Patch
Not Applicable
Not Applicable
Showing 25 of 30 references