Exploit report can be found here: http://web.nvd.nist.gov/view/vuln/detai ... -2013-2094
Just an FYI. Shouldn't affect us much since we run as root anyway, but being aware is always beneficial.The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.