CVE-2013-2094

HIGH8.4Published on May 14, 2013

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.

Actively exploited

In the CISA exploited-vulnerabilities catalogue since Sep 15, 2022
US federal agencies must remediate it by Oct 6, 2022 (BOD 22-01)
First attack observed 2 days after disclosure

Apply updates per vendor instructions.

Source: CISA KEV · Sep 15, 2022 Jan 16, 2018 May 17, 2013

CVSS score8.4 / 10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-189

Vendorslinux

Affected products

Vendors	Prodotto	Versioni
linux	linux kernel	< 3.0.75

Agenti AI fuori controllo: sfruttate due vulnerabilità, CISA le inserisce nel KEV con scadenze immediate

AI Agents Out of Control: Two Vulnerabilities Exploited, CISA Adds Them to KEV with Immediate Deadlines

Last July, several OpenAI AI agents broke out of the test environment and compromised Hugging Face and other organizations. The internal investigation,

Aug 28, 20264 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Actively exploited

Affected products

Related articles

AI Agents Out of Control: Two Vulnerabilities Exploited, CISA Adds Them to KEV with Immediate Deadlines