CVE-2013-4254: Linux Kernel

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by adding a hardware event to an event group led by a software event.

Affected products

• Linux Linux Kernel: up to and including 3.10.7; version 3.10.0 only; version 3.10.1 only; version 3.10.2 only; version 3.10.3 only; version 3.10.4 only; …

Published 2013-08-25. Last modified 2026-06-16.