CVE-2013-0871: Race Condition
A race conditon in ptrace can lead to kernel stack corruption and arbitrary kernel-mode code execution. A local unprivileged user could use this flaw to elevate his privileges.
References: http://seclists.org/oss-sec/2013/q1/326
Upstream fixes: 910ffdb18a6408e14febbb6e4b6840fd2c928c82 9899d11f654474d2d54ea52ceaa2a1f4db3abd68 9067ac85d533651b98c2ff903182a20cbb361fcb
Other sources
Race condition in the ptrace functionality in the Linux kernel before 3.7.5 allows local users to gain privileges via a PTRACESETREGS ptrace system call in a crafted application, as demonstrated by ptracedeath.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0871?
CVE-2013-0871 is considered a critical vulnerability due to its potential for privilege escalation and arbitrary kernel-mode code execution.
How do I fix CVE-2013-0871?
To mitigate CVE-2013-0871, upgrade the Linux kernel to a version that is 3.7.6 or later.
Who is affected by CVE-2013-0871?
CVE-2013-0871 affects local unprivileged users on systems running vulnerable versions of the Linux kernel.
What impact does CVE-2013-0871 have on system security?
The impact of CVE-2013-0871 includes kernel stack corruption which could lead to unauthorized access and code execution at a higher privilege level.
Is there a workaround for CVE-2013-0871?
There are no specific workarounds for CVE-2013-0871; updating the kernel is the recommended approach to eliminate the vulnerability.