CVE-2013-2146: Input Validation
arch/x86/kernel/cpu/perfeventintel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service (general protection fault and system crash) by attempting to set a reserved bit.
Other sources
Linux kernel built with the Performance Events Subsystem(CONFIGPERFEVENTS=y) is vulnerable to a kernel crash flaw, caused by incorrect masking of the reserved bits.
A user/program could use this flaw to crash the kernel, resulting in DoS.
Upstream fix: ------------- -> https://git.kernel.org/linus/f1923820c447e986a9da0fc6bf60c1dccdf0408e
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2013/06/05/23
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2146?
CVE-2013-2146 has a severity rating that indicates it could lead to a denial of service due to system crashes.
How do I fix CVE-2013-2146?
To fix CVE-2013-2146, upgrade your Linux kernel to version 3.8.9 or later.
What causes CVE-2013-2146?
CVE-2013-2146 is caused by an incorrect bitmask specification in the Performance Events Subsystem of the Linux kernel.
Who is affected by CVE-2013-2146?
CVE-2013-2146 affects local users on Linux kernel versions before 3.8.9.
What impact does CVE-2013-2146 have on systems?
The impact of CVE-2013-2146 on systems can include general protection faults and unexpected system crashes.