Vulnerability in Linux Kernel

CVE-2011-2905

Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.

EPSS: 0.004 (32.2th percentile) — read the EPSS interpretation.