CVE-2013-4254: Null Pointer Dereference
Last updated 24 July 2024
Other sources
Linux kernel built for the ARM(CONFIGARM/CONFIGARM64) platforms along with the hardware performance counter support(CONFIGHWPERFEVENTS) is vulnerable to a NULL pointer dereference flaw. This could lead to the kernel crash resulting in DoS or potential privilege escalation to gain root privileges by a non-root user.
An unprivileged user/program could use this flaw to crash the kernel resulting in DoS or potential privilege escalation to gain root access to a machine.
Upstream fix: ------------- -> https://lkml.org/lkml/2013/8/7/259
Reference: ---------- -> http://seclists.org/oss-sec/2013/q3/381
— Red Hat
The validateevent function in arch/arm/kernel/perfevent.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by adding a hardware event to an event group led by a software event.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4254?
CVE-2013-4254 has a severity rating that indicates it may lead to a denial of service or privilege escalation due to potential kernel crashes.
How do I fix CVE-2013-4254?
To mitigate CVE-2013-4254, upgrade to a patched version of the Linux kernel, specifically versions such as 5.10.223-1, 6.1.123-1, or later.
Which Linux kernel versions are affected by CVE-2013-4254?
CVE-2013-4254 affects Linux kernel versions 3.10.0 to 3.10.7 on ARM and ARM64 platforms.
What are the potential consequences of CVE-2013-4254?
The consequences of CVE-2013-4254 may include system crashes, resulting in denial of service and potential for unauthorized privilege escalation.
Is CVE-2013-4254 specific to any particular hardware?
CVE-2013-4254 is specifically related to the ARM and ARM64 hardware architectures due to their performance counter support.