{"id":"CVE-2023-6931","title":"A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.\n\n\n\nA perf_event's read_size can overflow, leading to an heap out-of-bounds increme…","summary":"A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.\n\n\n\nA perf_event's read_size can overflow, leading to an heap out-of-bounds increme…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787","CWE-787"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 4.3, < 6.7","debian_linux = 10.0"],"patched":["linux_kernel 6.7"],"published":"2023-12-19","updated":"2026-08-17","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-6931","references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b","label":"cve-coordination@google.com"},{"url":"https://kernel.dance/382c27f4ed28f803b1f1473ac2d8db0afc795a1b","label":"cve-coordination@google.com"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","label":"cve-coordination@google.com"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html","label":"cve-coordination@google.com"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kernel.dance/382c27f4ed28f803b1f1473ac2d8db0afc795a1b","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","exploit-available"],"epss":0.00715,"epssPercentile":0.51853,"ingestedAt":"2026-08-17T14:55:59.064Z","exploits":{"github":1,"githubRepos":["https://github.com/K0n9-log/CVE-2023-6931"],"checkedAt":"2026-09-21T15:26:03.139Z"},"exploitAvailable":true,"slug":"CVE-2023-6931","body":"## Overview\n\nA heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.\n\n\n\nA perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group().\n\n\n\nWe recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.\n\n## Affected\n\n- `linux_kernel >= 4.3, < 6.7`\n- `debian_linux = 10.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.7`","depth":"midnight","depthScore":55,"depthScoreParts":{"impact":42.9,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":4672,"id":"CVE-2023-6931","ts":1788887198126,"field":"exploit_available","old":"false","new":"true"},{"seq":3555,"id":"CVE-2023-6931","ts":1788886314304,"field":"exploit_available","old":"true","new":"false"},{"seq":2409,"id":"CVE-2023-6931","ts":1788882983516,"field":"exploit_available","old":"false","new":"true"},{"seq":1438,"id":"CVE-2023-6931","ts":1788882396480,"field":"exploit_available","old":"true","new":"false"},{"seq":552,"id":"CVE-2023-6931","ts":1788881832809,"field":"exploit_available","old":"false","new":"true"}]}