CVE-2013-7446
- State
- Published
- Severity
- Not scored
- Published
- Dec 28, 2015
- Updated
- Aug 6, 2024
- Reserved
- Nov 18, 2015
Description
Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- SUSE-SU-2016:0750vendor-advisory
- https://groups.google.com/forum/#%21topic/syzkaller/3twDUI4Cpm8
- 1034557vdb-entry
- SUSE-SU-2016:2010vendor-advisory
- SUSE-SU-2016:2011vendor-advisory
- SUSE-SU-2016:2003vendor-advisory
- SUSE-SU-2016:0751vendor-advisory
- SUSE-SU-2016:0747vendor-advisory
- SUSE-SU-2016:0755vendor-advisory
- SUSE-SU-2016:1994vendor-advisory
- USN-2887-2vendor-advisory
- https://forums.grsecurity.net/viewtopic.php?f=3&t=4150
- SUSE-SU-2016:0757vendor-advisory
- SUSE-SU-2016:1961vendor-advisory
- SUSE-SU-2016:2001vendor-advisory
- [netdev] 20150304 [PATCH net] af_unix: don't poll dead peersmailing-list
- SUSE-SU-2016:0753vendor-advisory
- USN-2886-1vendor-advisory
- USN-2887-1vendor-advisory
- USN-2890-3vendor-advisory
- SUSE-SU-2016:2006vendor-advisory
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7d267278a9ece963d77eefec61630223fce08c6c
- USN-2889-1vendor-advisory
- SUSE-SU-2016:2014vendor-advisory
- openSUSE-SU-2016:1641vendor-advisory
- USN-2889-2vendor-advisory
- SUSE-SU-2016:0746vendor-advisory
- [linux-kernel] 20150913 List corruption on epoll_ctl(EPOLL_CTL_DEL) an AF_UNIX socketmailing-list
- SUSE-SU-2016:0749vendor-advisory
- SUSE-SU-2016:1102vendor-advisory
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3
- 77638vdb-entry
- SUSE-SU-2016:2009vendor-advisory
- SUSE-SU-2016:2005vendor-advisory
- [linux-kernel] 20140515 eventpoll __list_del_entry corruption (was: perf: use after free in perf_remove_from_context)mailing-list
- SUSE-SU-2016:2007vendor-advisory
- SUSE-SU-2016:2074vendor-advisory
- USN-2890-2vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1282688
- SUSE-SU-2016:2000vendor-advisory
- SUSE-SU-2016:0745vendor-advisory
- DSA-3426vendor-advisory
- SUSE-SU-2016:1995vendor-advisory
- [oss-security] 20151118 Re: CVE request - Linux kernel - Unix sockets use after free - peer_wait_queue prematurely freedmailing-list
- SUSE-SU-2016:2002vendor-advisory
- [linux-kernel] 20131014 Re: epoll oops.mailing-list
- SUSE-SU-2016:0756vendor-advisory
- https://github.com/torvalds/linux/commit/7d267278a9ece963d77eefec61630223fce08c6c
- USN-2890-1vendor-advisory
- SUSE-SU-2016:0754vendor-advisory
- SUSE-SU-2016:0752vendor-advisory
- USN-2888-1vendor-advisory
- SUSE-SU-2016:0911vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.