Description
The perf_trace_event_perm function in kernel/trace/trace_event_perf.c in the Linux kernel before 3.12.2 does not properly restrict access to the perf subsystem, which allows local users to enable function tracing via a crafted application.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 3.11.8-1 | — |
| Debian 13 | linux | 3.11.8-1 | — |
| Debian 12 | linux | 3.11.8-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 2 | kernel-rt +10 | 3.8.13-rt27.33.el6rt | RHSA-2014:0100 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | dtrace-modules-3.8.13-44.el6uek | 0.4.3-4.el6 | ELSA-2014-3070 |
| Oracle Linux 7 | dtrace-modules-3.8.13-44.el7uek | 0.4.3-4.el7 | ELSA-2014-3070 |
| Oracle Linux 7 | kernel-uek +5 | 3.8.13-44.el7uek | ELSA-2014-3070 |
Advisories 2
- RHSA-2014:0100 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Jan 14, 2026
- ELSA-2014-3070 Important: Unbreakable Enterprise kernel security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Aug 22, 2014
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=12ae030d54ef250706da5642fc7697cc60ad0df7
- USN-2076-1 vendor-advisory
- USN-2070-1 vendor-advisory
- USN-2112-1 vendor-advisory
- USN-2071-1 vendor-advisory
- USN-2074-1 vendor-advisory
- USN-2068-1 vendor-advisory
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.2
- https://github.com/torvalds/linux/commit/12ae030d54ef250706da5642fc7697cc60ad0df7
- USN-2072-1 vendor-advisory
- RHSA-2014:0100 vendor-advisory
- USN-2075-1 vendor-advisory