Linux Kernel Privilege Escalation Vulnerability

高危 8.4EXPLOITED (CISA KEV)CVE-2013-2094 · Published 14/05/2013 · updated 16/06/2026

Linux Kernel Privilege Escalation Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 15/09/2022. Patch affected systems as an emergency.

要点

CVE-2013-2094 是高危 (CVSS 8.4)漏洞。
已被实际利用：CISA 于 15/09/2022 将其加入 KEV 目录。
未来 30 天内被利用的概率（EPSS）：47.7%，高于 98.8% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
Kernel Linux	Versions not published yet (product named by CISA KEV)

Description

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.

References

git.kernel.org · Not Applicable
lists.centos.org/pipermail/centos-announce/2013-May/019729.html · Third Party Advisory
lists.centos.org/pipermail/centos-announce/2013-May/019733.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2013-05/msg00008.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2013-06/msg00009.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2013-06/msg00017.html · Third Party Advisory
lkml.indiana.edu/hypermail/linux/kernel/1304.1/03652.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free