NetSight
IP …
medium6.9

CVE-2013-4254

The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or caus…

Impact

The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by adding a hardware event to an event group led by a software event.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.10.7
Versions 3.10.0, 3.10.1, 3.10.2, 3.10.3, 3.10.4

Weakness classification

CWE-20

References