CVE Feed

Dashboard / CVE / CVE-2013-2094

CVE-2013-2094

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.

Published:May 14, 2013

Last Modified:Apr 22, 2026

EPS:May 14, 2013

EPSS Score:0.65851

CVSS Score:8.4

CISA Notification

Description

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.

Required Action:

Apply updates per vendor instructions.

Notes:

No extra notes provided.

Due Date

Oct 6, 2022

1436 days ago

Alert Date

Sep 15, 2022

1457 days ago

Affected Products

Vendor

Product

Action

Vendor

Linux

Product

Linux Kernel

Linux

Linux Kernel

Vendor

Redhat

Product

Enterprise Linux

Redhat

Enterprise Linux

Vendor

Redhat

Product

Enterprise Mrg

Redhat

Enterprise Mrg

Vendor

Redhat

Product

Rhel Eus

Redhat

Rhel Eus

Exploits

http://packetstormsecurity.com/files/121616/semtex.c http://packetstormsecurity.com/files/121616/semtex.c https://www.exploit-db.com/exploits/25444 https://github.com/hiikezoe/libperf_event_exploit https://github.com/letsr00t/CVE-2013-2094 https://github.com/Pashkela/CVE-2013-2094 https://github.com/realtalk/cve-2013-2094 https://github.com/tarunyadav/fix-cve-2013-2094 https://github.com/timhsutw/cve-2013-2094 https://github.com/vnik5287/CVE-2013-2094 https://www.exploit-db.com/exploits/26131 https://www.exploit-db.com/exploits/33589

Common Weakness Enumeration

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-129 Improper Validation of Array Index

CWE-839 Numeric Range Comparison Without Minimum Check

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-10 Buffer Overflow via Environment Variables

CAPEC-100 Overflow Buffers

CAPEC-123 Buffer Manipulation

CAPEC-14 Client-side Injection-induced Buffer Overflow

CAPEC-24 Filter Failure through Buffer Overflow

CAPEC-42 MIME Conversion

CAPEC-44 Overflow Binary Resource File

CAPEC-45 Buffer Overflow via Symbolic Links

CAPEC-46 Overflow Variables and Tags

CAPEC-47 Buffer Overflow via Parameter Expansion

CAPEC-8 Buffer Overflow in an API Call

CAPEC-9 Buffer Overflow in Local Command-Line Utilities

Related CVEs

CVE-2026-80925 — In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when …

CVE-2026-80924 (CVSS 7.5) — In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for …

CVE-2026-80923 — In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_regis…

CVE-2026-80922 — In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random…

CVE-2026-80921 (CVSS 8.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits …

CVE-2026-80920 — In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when qu…

CVE-2026-80919 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquir…

CVE-2026-80918 — In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confus…

CVE-2026-80917 — In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer deref…

CVE-2026-80916 — In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race condit…

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8176cced706b5e5d15887584150764894e94e02f

http://lists.centos.org/pipermail/centos-announce/2013-May/019729.html

http://lists.centos.org/pipermail/centos-announce/2013-May/019733.html

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00009.html

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00017.html

http://lkml.indiana.edu/hypermail/linux/kernel/1304.1/03652.html

http://lkml.indiana.edu/hypermail/linux/kernel/1304.1/03976.html

http://lkml.indiana.edu/hypermail/linux/kernel/1304.1/04302.html

http://news.ycombinator.com/item?id=5703758

http://packetstormsecurity.com/files/121616/semtex.c

http://rhn.redhat.com/errata/RHSA-2013-0830.html

http://twitter.com/djrbliss/statuses/334301992648331267

http://www.exploit-db.com/exploits/33589

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

http://www.openwall.com/lists/oss-security/2013/05/14/6

http://www.osvdb.org/93361

http://www.reddit.com/r/netsec/comments/1eb9iw

http://www.ubuntu.com/usn/USN-1825-1

http://www.ubuntu.com/usn/USN-1826-1

http://www.ubuntu.com/usn/USN-1827-1

http://www.ubuntu.com/usn/USN-1828-1

http://www.ubuntu.com/usn/USN-1836-1

http://www.ubuntu.com/usn/USN-1838-1

https://bugzilla.redhat.com/show_bug.cgi?id=962792

https://github.com/torvalds/linux/commit/8176cced706b5e5d15887584150764894e94e02f

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8176cced706b5e5d15887584150764894e94e02f

http://lists.centos.org/pipermail/centos-announce/2013-May/019729.html

http://lists.centos.org/pipermail/centos-announce/2013-May/019733.html

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00009.html

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00017.html

http://lkml.indiana.edu/hypermail/linux/kernel/1304.1/03652.html

http://lkml.indiana.edu/hypermail/linux/kernel/1304.1/03976.html

http://lkml.indiana.edu/hypermail/linux/kernel/1304.1/04302.html

http://news.ycombinator.com/item?id=5703758

http://packetstormsecurity.com/files/121616/semtex.c

http://rhn.redhat.com/errata/RHSA-2013-0830.html

http://twitter.com/djrbliss/statuses/334301992648331267

http://www.exploit-db.com/exploits/33589

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

http://www.openwall.com/lists/oss-security/2013/05/14/6

http://www.osvdb.org/93361

http://www.reddit.com/r/netsec/comments/1eb9iw

http://www.ubuntu.com/usn/USN-1825-1

http://www.ubuntu.com/usn/USN-1826-1

http://www.ubuntu.com/usn/USN-1827-1

http://www.ubuntu.com/usn/USN-1828-1

http://www.ubuntu.com/usn/USN-1836-1

http://www.ubuntu.com/usn/USN-1838-1

https://bugzilla.redhat.com/show_bug.cgi?id=962792

https://github.com/torvalds/linux/commit/8176cced706b5e5d15887584150764894e94e02f

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2094

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High