CVE-2023-5717: Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component
A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.
If perfreadgroup() is called while an event's siblinglist is smaller than its child's siblinglist, it can increment or write to memory locations outside of the allocated buffer.
We recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.
Other sources
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a heap out-of-bounds write flaw in the Performance Events (perf) component. By sending a specially crafted request using the perfreadgroup() function, an authenticated attacker could exploit this vulnerability to gain elevated privileges.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-5717?
CVE-2023-5717 is a vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component that allows for local privilege escalation.
How can the CVE-2023-5717 vulnerability be exploited?
The CVE-2023-5717 vulnerability can be exploited by calling perf_read_group() while an event's sibling_list is smaller than its child's sibling_list, allowing for a heap out-of-bounds write.
Which software is affected by CVE-2023-5717?
The Linux kernel versions between 4.4 and 6.6, as well as Linux kernel versions 6.6-rc1, 6.6-rc2, 6.6-rc3, 6.6-rc4, 6.6-rc5, and 6.6-rc6 are affected by CVE-2023-5717.
What is the severity of CVE-2023-5717?
CVE-2023-5717 has a severity rating of 7.8 (High).
How can I fix the CVE-2023-5717 vulnerability?
To fix the CVE-2023-5717 vulnerability, it is recommended to update to a patched version of the Linux kernel.