CVE-2023-5717

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation. If perf read group() is called while an event's sibling list is smaller than its child's sibling list, it can increment or write to memory locations outside of the allocated buffer.

Recommendations Upgrade past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06 to resolve the issue. As a temporary workaround, consider restricting access to the perf read group() function until a patch is available.