CVE-2013-2094
HIGH KEVLinux Kernel < 3.0.75 - Local Privilege Escalation via perf_event_open System Call
Title source: llmExploitation Summary
CVE-2013-2094 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added September 15, 2022. EIP tracks 10 public exploits from researchers including Vitaly Nikolenko, Andrea Bittau, sd.
AI-analyzed exploit summary This exploit leverages a vulnerability in the Linux kernel's perf_swevent_init function to achieve local privilege escalation by manipulating interrupt descriptor table entries and executing arbitrary kernel code.
Description
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.
Exploits (10)
This exploit leverages a vulnerability in the Linux kernel's perf_swevent_init function to achieve local privilege escalation by manipulating interrupt descriptor table entries and executing arbitrary kernel code.
This exploit targets CVE-2013-2094, a Linux kernel vulnerability in the perf_swevent_enabled function, allowing local privilege escalation by manipulating performance event counters to overwrite kernel memory and execute arbitrary code.
This exploit targets a privilege escalation vulnerability in the Linux kernel (CVE-2013-2094) by manipulating the perf subsystem to achieve arbitrary kernel memory write access, ultimately escalating privileges to root.
This is a rewritten and deobfuscated version of the original CVE-2013-2094 exploit, which leverages a privilege escalation vulnerability in the Linux kernel's perf_event_open system call. The exploit manipulates kernel memory to overwrite credentials and elevate privileges to root.
This PoC exploits CVE-2013-2094, a Linux kernel vulnerability in the perf_swevent_enabled functionality, allowing arbitrary memory writes via the perf_event_open syscall. It targets specific Android devices with known memory addresses for exploitation.
This is a functional local privilege escalation exploit for CVE-2013-2094, targeting Linux kernels 2.6.32/2.6.37 to 3.8.10 via a PERF_EVENTS vulnerability. The exploit manipulates kernel memory to achieve root access without requiring a backconnect.
This is a functional local privilege escalation exploit for CVE-2013-2094, targeting a vulnerability in the Linux kernel's PERF_EVENT subsystem. It leverages memory corruption to overwrite kernel structures and achieve root privileges.
This is a local privilege escalation exploit for CVE-2013-2094 targeting Ubuntu 12.04 kernels (3.2.0-23, 3.2.0-29, 3.5.0-23). It leverages a vulnerability in the perf_swevent_init function to overwrite kernel memory and escalate privileges to root.
This is a privilege escalation exploit for CVE-2013-2094, targeting a vulnerability in the Linux kernel's perf_swevent_init function. It manipulates kernel memory to achieve root access by exploiting a race condition in the performance events subsystem.
This script automates the mitigation of CVE-2013-2094 by downloading kernel packages and compiling a systemtap script into a kernel module. It is designed to patch the vulnerability on a specified kernel version.
References (30)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H