CVE-2013-2094

HighCVSS 8.4/10Known exploited (CISA KEV)Last modified Jun 16, 2026

Description

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-189

Affected software

No affected versions have been published.

Timeline

Published
May 14, 2013
Last modified
Jun 16, 2026
Added to CISA KEV
Sep 15, 2022
NVD status
Analyzed

Related CVEs from 2013

CVE-2013-20959.8rubygem-openshift-origin-controller: API can be used to create applications via cartridge_cache.rb URI.prase() to perform command injectionCVE-2013-20962.1OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a CVE-2013-20977.8ZPanel through 10.1.0 has Remote Command ExecutionCVE-2013-20994.3Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of pytCVE-2013-21009.3The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSLCVE-2013-21015.4Katello has multiple XSS issues in various entitiesCVE-2013-21023.3The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics service with no authentication when a JGroupsCVE-2013-21038.1OpenShift cartridge allows remote URL retrievalCVE-2013-21045.5python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remoCVE-2013-21053.3The Show In Browser (show_in_browser) gem 0.0.3 for Ruby allows local users to inject arbitrary web script or HTML via a symlink attack on /CVE-2013-21067.5webauth before 4.6.1 has authentication credential disclosureCVE-2013-21076.8Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack th
CVE-2013-2094: High severity, CVSS 8.4 | Vulnix