CVE-2013-0268: Medium severity linux kernel vulnerability

Q: What is the severity of CVE-2013-0268?

CVE-2013-0268 has a high severity rating due to its potential for local privilege escalation, allowing a root user to execute arbitrary code in kernel mode.

Q: How do I fix CVE-2013-0268?

To fix CVE-2013-0268, you should upgrade your Linux kernel to a version that includes the patch, such as 5.10.223-1 or later.

Q: Which Linux versions are affected by CVE-2013-0268?

CVE-2013-0268 affects Linux kernel versions up to and including 3.7.4.

Q: What kind of vulnerability is CVE-2013-0268?

CVE-2013-0268 is a local privilege escalation vulnerability that can be exploited by a malicious user with root access.

Q: Is there a workaround for CVE-2013-0268 while waiting for a patch?

There are no effective workarounds for CVE-2013-0268; the recommended action is to upgrade to a patched kernel version.

Published Feb 7, 2013

Updated

Access to /dev/cpu//msr was protected only using filesystem checks. A local uid 0 (root) user with all capabilities dropped could use this flaw to execute arbitrary code in kernel mode.

Upstream commit: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=commitdiff;h=c903f0456bc69176912dee6dd25c6a66ee1aed00

References: http://grsecurity.net/~spender/msr32.c

Other sources

The msropen function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c.

— Launchpad

Affected Software

168 affected componentsFixes available

Linux Linux kernel<=3.7.5

Linux Linux kernel=3.0-rc1

Linux Linux kernel=3.0-rc2

Linux Linux kernel=3.0-rc3

Linux Linux kernel=3.0-rc4

Linux Linux kernel=3.0-rc5

Linux Linux kernel=3.0-rc6

Linux Linux kernel=3.0-rc7

Linux Linux kernel=3.0.1

Linux Linux kernel=3.0.2

Linux Linux kernel=3.0.3

Linux Linux kernel=3.0.4

Linux Linux kernel=3.0.5

Linux Linux kernel=3.0.6

Linux Linux kernel=3.0.7

Linux Linux kernel=3.0.8

Linux Linux kernel=3.0.9

Linux Linux kernel=3.0.10

Linux Linux kernel=3.0.11

Linux Linux kernel=3.0.12

Linux Linux kernel=3.0.13

Linux Linux kernel=3.0.14

Linux Linux kernel=3.0.15

Linux Linux kernel=3.0.16

Linux Linux kernel=3.0.17

Linux Linux kernel=3.0.18

Linux Linux kernel=3.0.19

Linux Linux kernel=3.0.20

Linux Linux kernel=3.0.21

Linux Linux kernel=3.0.22

Linux Linux kernel=3.0.23

Linux Linux kernel=3.0.24

Linux Linux kernel=3.0.25

Linux Linux kernel=3.0.26

Linux Linux kernel=3.0.27

Linux Linux kernel=3.0.28

Linux Linux kernel=3.0.29

Linux Linux kernel=3.0.30

Linux Linux kernel=3.0.31

Linux Linux kernel=3.0.32

Linux Linux kernel=3.0.33

Linux Linux kernel=3.0.34

Linux Linux kernel=3.0.35

Linux Linux kernel=3.0.36

Linux Linux kernel=3.0.37

Linux Linux kernel=3.0.38

Linux Linux kernel=3.0.39

Linux Linux kernel=3.0.40

Linux Linux kernel=3.0.41

Linux Linux kernel=3.0.42

Linux Linux kernel=3.0.43

Linux Linux kernel=3.0.44

Linux Linux kernel=3.1

Linux Linux kernel=3.1-rc1

Linux Linux kernel=3.1-rc2

Linux Linux kernel=3.1-rc3

Linux Linux kernel=3.1-rc4

Linux Linux kernel=3.1.1

Linux Linux kernel=3.1.2

Linux Linux kernel=3.1.3

Linux Linux kernel=3.1.4

Linux Linux kernel=3.1.5

Linux Linux kernel=3.1.6

Linux Linux kernel=3.1.7

Linux Linux kernel=3.1.8

Linux Linux kernel=3.1.9

Linux Linux kernel=3.1.10

Linux Linux kernel=3.2

Linux Linux kernel=3.2-rc2

Linux Linux kernel=3.2-rc3

Linux Linux kernel=3.2-rc4

Linux Linux kernel=3.2-rc5

Linux Linux kernel=3.2-rc6

Linux Linux kernel=3.2-rc7

Linux Linux kernel=3.2.1

Linux Linux kernel=3.2.2

Linux Linux kernel=3.2.3

Linux Linux kernel=3.2.4

Linux Linux kernel=3.2.5

Linux Linux kernel=3.2.6

Linux Linux kernel=3.2.7

Linux Linux kernel=3.2.8

Linux Linux kernel=3.2.9

Linux Linux kernel=3.2.10

Linux Linux kernel=3.2.11

Linux Linux kernel=3.2.12

Linux Linux kernel=3.2.13

Linux Linux kernel=3.2.14

Linux Linux kernel=3.2.15

Linux Linux kernel=3.2.16

Linux Linux kernel=3.2.17

Linux Linux kernel=3.2.18

Linux Linux kernel=3.2.19

Linux Linux kernel=3.2.20

Linux Linux kernel=3.2.21

Linux Linux kernel=3.2.22

Linux Linux kernel=3.2.23

Linux Linux kernel=3.2.24

Linux Linux kernel=3.2.25

Linux Linux kernel=3.2.26

Linux Linux kernel=3.2.27

Linux Linux kernel=3.2.28

Linux Linux kernel=3.2.29

Linux Linux kernel=3.2.30

Linux Linux kernel=3.3

Linux Linux kernel=3.3-rc1

Linux Linux kernel=3.3-rc2

Linux Linux kernel=3.3-rc3

Linux Linux kernel=3.3-rc4

Linux Linux kernel=3.3-rc5

Linux Linux kernel=3.3-rc6

Linux Linux kernel=3.3-rc7

Linux Linux kernel=3.3.1

Linux Linux kernel=3.3.2

Linux Linux kernel=3.3.3

Linux Linux kernel=3.3.4

Linux Linux kernel=3.3.5

Linux Linux kernel=3.3.6

Linux Linux kernel=3.3.7

Linux Linux kernel=3.3.8

Linux Linux kernel=3.4

Linux Linux kernel=3.4-rc1

Linux Linux kernel=3.4-rc2

Linux Linux kernel=3.4-rc3

Linux Linux kernel=3.4-rc4

Linux Linux kernel=3.4-rc5

Linux Linux kernel=3.4-rc6

Linux Linux kernel=3.4-rc7

Linux Linux kernel=3.4.1

Linux Linux kernel=3.4.2

Linux Linux kernel=3.4.3

Linux Linux kernel=3.4.4

Linux Linux kernel=3.4.5

Linux Linux kernel=3.4.6

Linux Linux kernel=3.4.7

Linux Linux kernel=3.4.8

Linux Linux kernel=3.4.9

Linux Linux kernel=3.4.10

Linux Linux kernel=3.4.11

Linux Linux kernel=3.4.12

Linux Linux kernel=3.4.13

Linux Linux kernel=3.4.14

Linux Linux kernel=3.4.15

Linux Linux kernel=3.4.16

Linux Linux kernel=3.4.17

Linux Linux kernel=3.4.18

Linux Linux kernel=3.4.19

Linux Linux kernel=3.4.20

Linux Linux kernel=3.4.21

Linux Linux kernel=3.4.22

Linux Linux kernel=3.4.23

Linux Linux kernel=3.4.24

Linux Linux kernel=3.5.1

Linux Linux kernel=3.5.2

Linux Linux kernel=3.5.3

Linux Linux kernel=3.5.4

Linux Linux kernel=3.5.5

Linux Linux kernel=3.5.6

Linux Linux kernel=3.5.7

Linux Linux kernel=3.6.9

Linux Linux kernel=3.6.10

Linux Linux kernel=3.6.11

Linux Linux kernel=3.7

Linux Linux kernel=3.7.1

Linux Linux kernel=3.7.2

Linux Linux kernel=3.7.3

Linux Linux kernel=3.7.4

debian/linux

5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1

Remediation

Patch Available

https://git.kernel.org/linus/1da177e4c3f41524e886b7f1b8a0c1fc7321cac2

Patch Available

https://git.kernel.org/linus/c903f0456bc69176912dee6dd25c6a66ee1aed00

Event History

Feb 7, 2013

Data Sourced

via Red Hat·10:53 AM

DescriptionSeverityAffected Software

Feb 18, 2013

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Jan 11, 2024

Data Sourced

via Launchpad·10:00 PM

Description

Sep 16, 2024

Data Sourced

via Ubuntu·12:50 AM

RemedyDescriptionSeverityAffected Software

Apr 24, 2025

Data Sourced

via Debian·02:00 AM

DescriptionAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-0268?

CVE-2013-0268 has a high severity rating due to its potential for local privilege escalation, allowing a root user to execute arbitrary code in kernel mode.

How do I fix CVE-2013-0268?

To fix CVE-2013-0268, you should upgrade your Linux kernel to a version that includes the patch, such as 5.10.223-1 or later.

Which Linux versions are affected by CVE-2013-0268?

CVE-2013-0268 affects Linux kernel versions up to and including 3.7.4.

What kind of vulnerability is CVE-2013-0268?

CVE-2013-0268 is a local privilege escalation vulnerability that can be exploited by a malicious user with root access.

Is there a workaround for CVE-2013-0268 while waiting for a patch?

There are no effective workarounds for CVE-2013-0268; the recommended action is to upgrade to a patched kernel version.

CVE-2013-0268: Medium severity linux kernel vulnerability

Other sources

Affected Software

Remediation

Patch Available

Patch Available

Event History

Frequently Asked Questions

What is the severity of CVE-2013-0268?

How do I fix CVE-2013-0268?

Which Linux versions are affected by CVE-2013-0268?

What kind of vulnerability is CVE-2013-0268?

Is there a workaround for CVE-2013-0268 while waiting for a patch?

Company

Resources

Contact