CVE-2013-1826: Null Pointer Dereference
Last updated 24 July 2024
Other sources
Linux kernel built with XFRM framework support is vulnerable to a NULL pointer dereference flaw. It occurs while accessing XFRM state via xfrmstatenetlink routine.
A privileged(CAPNETADMIN) user/program could use this flaw to crash systems, resulting in DoS.
Upstream fix: ------------- -> https://git.kernel.org/linus/864745d291b5ba80ea0bd0edcbe67273de368836
Reference: ---------- -> http://seclists.org/oss-sec/2013/q1/598
— Red Hat
The xfrmstatenetlink function in net/xfrm/xfrmuser.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dumponestate function calls, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAPNETADMIN capability.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1826?
CVE-2013-1826 has a severity rating that indicates it can lead to a denial-of-service condition.
How do I fix CVE-2013-1826?
To fix CVE-2013-1826, update your Linux kernel to version 3.5.7 or later.
What systems are affected by CVE-2013-1826?
CVE-2013-1826 affects various versions of the Linux kernel up to 3.5.6.
Can CVE-2013-1826 be exploited remotely?
CVE-2013-1826 requires a privileged user with CAP_NET_ADMIN capabilities to exploit.
What type of vulnerability is CVE-2013-1826?
CVE-2013-1826 is a NULL pointer dereference vulnerability in the Linux kernel's XFRM framework.