Improper input validation in Linux Kernel

CVE-2013-2146

arch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service (general protection fault and system crash) by attempting to set a reserved bit.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.005 (40.1th percentile) — read the EPSS interpretation.