Is CVE-2013-2094 actively exploited?

Yes. CVE-2013-2094 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2013-2094 be exploited remotely?

The attack vector of CVE-2013-2094 has not been classified yet.

What is the CVSS score of CVE-2013-2094?

CVE-2013-2094 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2013-2094

HIGHCISA KEVIN THE WILD

CVE-2013-2094

Published: September 15, 2022

EPSS:58.45%probability of exploitation in 30 daysPercentile:98.2th

Official Description

Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation.

NVD Source

CISA KEV Advisory

Linux Kernel Privilege Escalation Vulnerability

Added to KEV: 2022-09-15Federal patch deadline: 2022-10-06

Required Action (CISA)

Apply updates per vendor instructions.

Risk Analysis

This high-severity vulnerability in the Linux kernel allows for privilege escalation due to an out-of-bounds access in sw_perf_event_destroy(). The flaw occurs because the kernel fails to properly check all 64 bits of user-provided configuration attributes. Its inclusion in CISA's KEV and high EPSS score confirm active exploitation and a high likelihood of further attacks.

This vulnerability is actively being exploited in the wild. Exploitation typically requires local access to the system to achieve privilege escalation.

Recommended Action

System administrators should apply the latest Linux kernel updates to patch this vulnerability. Regular patching of the operating system is crucial to prevent privilege escalation attacks.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2013-2094 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CISA has added CVE-2013-2094 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.