Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2015-8955

Опубликовано: 17 мар. 2015
Источник: redhat
CVSS3: 7.3
CVSS2: 6.9
EPSS Низкий

Описание

arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via vectors involving events that are mishandled during a span of multiple HW PMUs.

Отчет

This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5. 6, 7 and Red Hat Enterprise MRG-2 as the code with the flaw is not present in the products listed.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5kernelNot affected
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise MRG 2realtime-kernelNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-822
https://bugzilla.redhat.com/show_bug.cgi?id=1383391kernel: Possible privilege escalation via groups spanning multiple HW PMUs

EPSS

Процентиль: 20%
0.00064
Низкий

7.3 High

CVSS3

6.9 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.3
ubuntu
больше 9 лет назад

arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via vectors involving events that are mishandled during a span of multiple HW PMUs.

CVSS3: 7.3
nvd
больше 9 лет назад

arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via vectors involving events that are mishandled during a span of multiple HW PMUs.

CVSS3: 7.3
debian
больше 9 лет назад

arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 ...

CVSS3: 7.3
github
больше 3 лет назад

arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via vectors involving events that are mishandled during a span of multiple HW PMUs.

EPSS

Процентиль: 20%
0.00064
Низкий

7.3 High

CVSS3

6.9 Medium

CVSS2