Skip to content
OpenAdvisories
Unscored CVE-2013-2146 EUVD-2013-2111GHSA-9hx9-p3c9-mvrc

arch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an inc…

Published Jun 7, 2013 · Updated Aug 6, 2024 · Assigned by redhat

Description

arch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service (general protection fault and system crash) by attempting to set a reserved bit.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 3.9.4-1 —
Debian 13 linux 3.9.4-1 —
Debian 12 linux 3.9.4-1 —
ReleasePackageFixed inAdvisory
RHEL 6 perf +15 2.6.32-358.18.1.el6 RHSA-2013:1173
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat OpenStack 3 perf +9 2.6.32-358.118.1.openstack.el6 RHSA-2013:1195
Red Hat MRG 2 kernel-rt +11 3.6.11.5-rt37.55.el6rt RHSA-2013:1264

Advisories 3

References