Invalid Pointer Dereference in perf_event.c on arm64 Platforms

CVE-2015-8955 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via vectors involving events that are mishandled during a span of multiple HW PMUs.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.