CVE-2013-2148: Low severity linux kernel vulnerability
Last updated 24 July 2024
Other sources
Linux kernel built with the Filesystem wide access notification (CONFIGFANOTIFY) support is vulnerable to an information leakage flaw. The leaked bytes could be accessed via read(2) call on the fanotify descriptor.
A user/program could use this flaw to leak kernel memory bytes.
Upstream fix: ------------- -> https://lkml.org/lkml/2013/6/3/128
— Red Hat
The filleventmetadata function in fs/notify/fanotify/fanotifyuser.c in the Linux kernel through 3.9.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a read operation on the fanotify descriptor.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2148?
CVE-2013-2148 is rated as a high severity vulnerability due to its potential for information leakage.
How do I fix CVE-2013-2148?
To mitigate CVE-2013-2148, upgrade the Linux kernel to version 5.10.223-1 or higher.
What versions of the Linux kernel are affected by CVE-2013-2148?
CVE-2013-2148 affects Linux kernel versions up to and including 3.9.4.
What type of vulnerability is CVE-2013-2148?
CVE-2013-2148 is an information leakage vulnerability that allows access to leaked kernel memory.
What impact does CVE-2013-2148 have on system security?
The impact of CVE-2013-2148 on system security can lead to unauthorized access to sensitive data in kernel memory, constituting a serious risk for users.