CyberRota Analysis
AI-GeneratedA vulnerability exists in the handling of performance monitoring counters (PMCs) during the execution of setuid or setgid binaries, allowing unprivileged local users to continue monitoring processes that should be protected. This flaw can lead to unauthorized access to sensitive information and compromise the integrity of the system. Organizations utilizing affected systems should prioritize remediation to mitigate potential exploitation risks.
Original NVD Description
When a process calls execve(2) to execute a setuid or setgid image, hwpmc(4) is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after the process executes a setuid or setgid binary, contrary to the intended policy.