CVE-2013-2094

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.

Referanslar

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8176cced706b5e5d15887584150764894e94e02f
• http://lists.centos.org/pipermail/centos-announce/2013-May/019729.html
• http://lists.centos.org/pipermail/centos-announce/2013-May/019733.html
• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00008.html
• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html
• http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html