This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2015-9004 →
DEBIAN-CVE-2015-9004
kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted applicatio...
Original description
The description as published by the source.
kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted application, related to the perf_pmu_register and perf_event_open functions.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt7-1"}]}]
Debian:13
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt7-1"}]}]
Debian:14
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt7-1"}]}]
References
- advisory security-tracker.debian.org