CVE-2013-1767: Use After Free
Last updated 24 July 2024
Other sources
Linux kernel built with support to tmpfs' is vulnerable to a use-after-free flaw, which happens while remounting tmpfs, which was mounted with mpol=M option initially, but the same is missing in the remount request.
A privileged local user could use this flaw to crash the system or, potentially, further escalate their privileges.
Upstream fix: ------------- -> https://git.kernel.org/linus/5f00110f7273f9ff04ac69a5f85bb535a4fd0987
References: ----------- 1] http://www.openwall.com/lists/oss-security/2013/02/25/14
— Red Hat
Use-after-free vulnerability in the shmemremountfs function in mm/shmem.c in the Linux kernel before 3.7.10 allows local users to gain privileges or cause a denial of service (system crash) by remounting a tmpfs filesystem without specifying a required mpol (aka mempolicy) mount option.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1767?
CVE-2013-1767 has a severity rating that could lead to a system crash if exploited by a local privileged user.
How do I fix CVE-2013-1767?
To fix CVE-2013-1767, update the Linux kernel to 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
Which Linux versions are affected by CVE-2013-1767?
CVE-2013-1767 affects various Linux kernel versions including 3.0 up to 3.7.9.
What is a use-after-free flaw in the context of CVE-2013-1767?
A use-after-free flaw occurs when memory that has already been freed is accessed, which can lead to unpredictable behavior or crashes.
Who can exploit CVE-2013-1767?
CVE-2013-1767 can be exploited by a local privileged user on the affected system.