CVE-2013-1819: Null Pointer Dereference
Last updated 24 July 2024
Other sources
Linux kernel built with support for XFS file system is vulnerable to a NULL pointer dereference flaw. This occurs while accessing blocks beyond the end of the file system, possibly on a corrupted device.
A user able to mount the file system could use this flaw to crash the kernel, resulting in DoS.
Upstream fix: ------------- -> https://git.kernel.org/linus/eb178619f930fa2ba2348de332a1ff1c66a31424
— Red Hat
The xfsbuffind function in fs/xfs/xfsbuf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability to mount an XFS filesystem containing a metadata inode with an invalid extent map.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1819?
CVE-2013-1819 is considered a moderate severity vulnerability as it can cause a denial of service through a NULL pointer dereference.
How do I fix CVE-2013-1819?
To resolve CVE-2013-1819, users should update their Linux kernel to versions patched against this vulnerability, such as kernel-rt 0:3.6.11.2-rt33.39.el6 or newer stable releases from Debian.
Which systems are affected by CVE-2013-1819?
CVE-2013-1819 affects Linux kernel versions prior to 3.7.5 and specific patched versions of the kernel-rt and Debian Linux packages.
What causes the CVE-2013-1819 vulnerability?
The CVE-2013-1819 vulnerability is caused by a NULL pointer dereference when accessing blocks beyond the end of a corrupted XFS file system.
Can CVE-2013-1819 lead to data loss?
While CVE-2013-1819 primarily leads to a system crash, the potential for data loss exists if the file system becomes corrupted during the attack.