CVE-2023-6931 in Linuxinformación

Resumen

por MITRE • 2023-12-19

A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.

A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group().

We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsable

Google Inc.

Reservar

2023-12-18

Divulgación

2023-12-19

Moderación

aceptado

Artículo

VDB-248382

CPE

listo

EPSS

0.00715

KEV

no

Actividades

muy bajo

Fuentes

Want to stay up to date on a daily basis?

Enable the mail alert feature now!