CVE-2013-4254

Published: Aug 25, 2013Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by adding a hardware event to an event group led by a software event.

Affected (8)

Products: Linux: Linux Kernel

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.10.7
Linux Linux Kernel	Version 3.10.0
Linux Linux Kernel	Version 3.10.1
Linux Linux Kernel	Version 3.10.2
Linux Linux Kernel	Version 3.10.3
Linux Linux Kernel	Version 3.10.4
Linux Linux Kernel	Version 3.10.5
Linux Linux Kernel	Version 3.10.6

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (28)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c95eb3184ea1a3a2551df57190c81da695e2144b

Source: secalert@redhat.com

http://secunia.com/advisories/54494

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.8

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/08/16/6

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1968-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1969-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1970-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1971-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1972-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1973-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1974-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1975-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=998878

Source: secalert@redhat.com

https://github.com/torvalds/linux/commit/c95eb3184ea1a3a2551df57190c81da695e2144b

Source: secalert@redhat.com

Patch

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c95eb3184ea1a3a2551df57190c81da695e2144b

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/54494

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.8

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/08/16/6

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1968-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1969-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1970-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1971-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1972-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1973-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1974-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1975-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=998878

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/c95eb3184ea1a3a2551df57190c81da695e2144b

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.