[VU:774103] Linux kernel perf_swevent_enabled array out-of-bound access privilege escalation vulnerability

Overview

The Linux kernel's Performance Events implementation is susceptible to an out-of-bounds array vulnerability that may be used by a local unprivileged user to escalate privileges.

Impact

A local authenticated user may be able to exploit this vulnerability to escalate privileges.

Solution

Apply an Update Red Hat, Debian, CentOS, and Ubuntu have all released patches. Users should receive the patches through their Linux distributions' normal update process. Affected Distributions
Red Hat Enterprise Linux 6 & Red Hat Enterprise MRG 2
CentOS 6
Debian 7.0 (Wheezy)
Ubuntu 12.04 LTS, 12.10, 13.04
Other distributions may be affected but were not confirmed at the time of publication.

Acknowledgements

Tommi Rantala
discovered
this vulnerability.