Red Hat Security AdvisoryRHSA-2013:0830
kernel security update
Released 2013-05-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-358.6.2.el6, kernel-debug-2.6.32-358.6.2.el6, kernel-debug-devel-2.6.32-358.6.2.el6 +5
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-358.6.2.el6, python-perf-2.6.32-358.6.2.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-358.6.2.el6, kernel-debug-2.6.32-358.6.2.el6, kernel-debug-devel-2.6.32-358.6.2.el6 +5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-358.6.2.el6, python-perf-2.6.32-358.6.2.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-358.6.2.el6, kernel-bootwrapper-2.6.32-358.6.2.el6, kernel-debug-2.6.32-358.6.2.el6 +8
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-358.6.2.el6, python-perf-2.6.32-358.6.2.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-358.6.2.el6, kernel-debug-2.6.32-358.6.2.el6, kernel-debug-devel-2.6.32-358.6.2.el6 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-358.6.2.el6, python-perf-2.6.32-358.6.2.el6
Fixes 1 record
Priority CRITICAL 96KEV
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.47709 · Published 2013-05-14 · Fixed CWE-189
