CVE-2013-2930: The perf_trace_event_perm function in kernel/trace/trace_event_perf.c in the Linux kernel before 3.12.2 doe...

Security readout for executives and security teams

This is a Linux kernel access-control flaw in the perf tracing subsystem. A local user could enable function tracing when they should not be allowed to. The source bundle does not show remote exploitation, privilege escalation, or confirmed active exploitation, but kernel-level tracing exposure can matter on shared systems. Likely exposure is Linux systems running kernels before 3.12.2 or downstream vendor kernels identified by Ubuntu and Red Hat advisories. The provided affected-product metadata is incomplete, so exact package names and versions must be confirmed from vendor advisories and local inventory. Treat this as a maintenance-priority kernel update, with higher urgency for multi-user Linux hosts. Current evidence does not support emergency remote-exploitation handling, but vulnerable shared systems should be remediated promptly. Mitigation focus: Apply vendor kernel security updates from relevant Ubuntu or Red Hat advisories.; Upgrade to a kernel containing upstream commit 12ae030d54ef250706da5642fc7697cc60ad0df7 where applicable.; Prioritize shared Linux servers where untrusted users have local access..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.