- Vendor / Project
- Linux
- Product
- Kernel
- Date added
- Sep 15, 2022
- Due date
- Oct 6, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-189
Description
Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation.
Required action
Apply updates per vendor instructions.