Vulnerability Database

299,038

Total vulnerabilities in the database

CVE-2013-4254

The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by adding a hardware event to an event group led by a software event.

  • Published: Aug 25, 2013
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-4254
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.9
  • AV:L/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
linux / linux_kernel 3.10.5 3.10.5.x
linux / linux_kernel 3.10.2 3.10.2.x
linux / linux_kernel 3.10.1 3.10.1.x
linux / linux_kernel 3.10.4 3.10.4.x
linux / linux_kernel 3.10.6 3.10.6.x
linux / linux_kernel - 3.10.7.x
linux / linux_kernel 3.10.0 3.10.0.x
linux / linux_kernel 3.10.3 3.10.3.x