Integer Overflow or Wraparound The advisory has been revoked - it doesn't affect any version of package perf (opens in a new tab)

Threat Intelligence

0.57% (44^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL6-PERF-1766224
published21 Oct 2021
disclosed22 Mar 2020

Report a new vulnerability Found a mistake?

Introduced: 22 Mar 2020

CVE-2020-13974 (opens in a new tab) CWE-190 (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:6.

NVD Description

Note: Versions mentioned in the description apply only to the upstream perf package and not the perf package as distributed by RHEL.

An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community argue that the integer overflow does not lead to a security issue in this case.