The perf_trace_event_perm function in kernel/trace/trace_event_perf.c in the Linux kernel before 3.12.2 does not properly restrict access to the perf subsystem, which allows local users to enable function tracing via a crafted application.
Exploitability
AV:LAC:LAu:NImpact
C:PI:PA:N3.6/AV:L/AC:L/Au:N/C:P/I:P/A:N