Linux Kernel Privilege Escalation
CVE-2013-2094 is a high-severity vulnerability in Linux Kernel from Linux, with a CVSS 2.0 base score of 7.2 out of 10. It can be exploited with local access to the system by an unauthenticated attacker, without any action from a user. The record lists versions 3.0.75, 3.2.45, 3.4.42 as the first without the flaw, so updating Linux Kernel to one of those releases or later removes the exposure. CISA added it to the Known Exploited Vulnerabilities catalogue on September 15, 2022, which means attacks have been observed in the wild.
Attackers are already exploiting this vulnerability, according to CISA.
What to do
- Update Linux Kernel to 3.0.75 or 3.2.45 or 3.4.42 or 3.8.9, whichever matches your release line, or a later version.
- CISA's required action: Apply updates per vendor instructions.
Affected products and versions
| Vendor | Product | Affected versions | Fixed in |
|---|---|---|---|
| Linux | Linux Kernel | before 3.0.75; 3.1 up to, but not including, 3.2.45; 3.3 up to, but not including, 3.4.42; 3.5 up to, but not including, 3.8.9 | 3.0.75, 3.2.45, 3.4.42, 3.8.9 |
Version data comes from NVD's product matching. Confirm against the vendor advisory before deciding you are unaffected.
How the severity score breaks down
- Access vector
- LocalLocal access is required.
- Access complexity
- LowNo special conditions are needed.
- Authentication
- NoneNo login is needed.
- Confidentiality
- CompleteAll data can be read.
- Integrity
- CompleteAny data can be modified.
- Availability
- CompleteThe system can be shut down completely.
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C. Scored by NVD.
| Scoring system | Score | Severity | Scored by |
|---|---|---|---|
| CVSS 3.1 | 8.4 | High | CISA (ADP) |
| CVSS 2.0 | 7.2 | High | NVD |
Official description
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.
Source: the CVE record as published by its numbering authority, via NVD and CVE.org.
Timeline
- CVE record published.
- Added to CISA's Known Exploited Vulnerabilities catalogue.
- Deadline for US federal agencies to remediate, set by CISA.
- CISA published its SSVC assessment (exploitation: active, automatable: no, technical impact: total).
- Record last changed materially (score, affected products, status or references).
References
Patches and release notes
Third-party and government advisories
- lists.centos.org/pipermail/centos-announce/2013-May/019729.htmlThird Party Advisory, VDB Entry
- lists.centos.org/pipermail/centos-announce/2013-May/019733.htmlThird Party Advisory, VDB Entry
- lists.opensuse.org/opensuse-security-announce/2013-05/msg00008.htmlThird Party Advisory, VDB Entry
- lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.htmlThird Party Advisory, VDB Entry
- lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.htmlThird Party Advisory, VDB Entry
- lists.opensuse.org/opensuse-security-announce/2013-06/msg00009.htmlThird Party Advisory, VDB Entry
- lists.opensuse.org/opensuse-security-announce/2013-06/msg00017.htmlThird Party Advisory, VDB Entry
- lkml.indiana.edu/hypermail/linux/kernel/1304.1/03652.htmlThird Party Advisory, VDB Entry
- lkml.indiana.edu/hypermail/linux/kernel/1304.1/03976.htmlThird Party Advisory, VDB Entry
- lkml.indiana.edu/hypermail/linux/kernel/1304.1/04302.htmlThird Party Advisory
- news.ycombinator.com/item?id=5703758Third Party Advisory
- rhn.redhat.com/errata/RHSA-2013-0830.htmlThird Party Advisory
- exploit-db.com/exploits/33589Third Party Advisory, VDB Entry
- mandriva.com/security/advisories?name=MDVSA-2013:176Mailing List, Third Party Advisory
- openwall.com/lists/oss-security/2013/05/14/6Mailing List, Third Party Advisory
Technical write-ups (may include proof of concept)
- packetstormsecurity.com/files/121616/semtex.cExploit, Third Party Advisory, VDB Entry
Other references
Other vulnerabilities in Linux Kernel
- 9.8 Critical severity
- 7.0 High severity
- 7.8 High severity
- 7.1 High severity
- 7.0 High severity
- 7.8 High severity
Spotted an error? Tell us.