CVE-2013-3301: Null Pointer Dereference
Published Apr 15, 2013
·Updated
Last updated 24 July 2024
Other sources
Linux kernel built with Function Tracers(CONFIGFUNCTIONTRACER) & Stack Tracers(CONFIGSTACKTRACER) support is vulnerable to a NULL pointer deference flaw. It occurs while writing to setftracepid' or setgraphfunction' files used by kernel tracers.
A privileged(CAPSYSADMIN) user could use this flaw to crash the system resulting in DoS.
Upstream fix: ------------- -> https://git.kernel.org/linus/6a76f8c0ab19f215af2a3442870eeb5f0e81998d
— Red Hat
The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the CAPSYSADMIN capability for write access to the (1) setftracepid or (2) setgraphfunction file, and then making an lseek system call.
— Launchpad
Affected Software
231 affected componentsFixes available
Linux Linux kernel<=3.8.7
Linux Linux kernel=3.0-rc1
Linux Linux kernel=3.0-rc2
Linux Linux kernel=3.0-rc3
Linux Linux kernel=3.0-rc4
Linux Linux kernel=3.0-rc5
Linux Linux kernel=3.0-rc6
Linux Linux kernel=3.0-rc7
Linux Linux kernel=3.0.1
Linux Linux kernel=3.0.2
Linux Linux kernel=3.0.3
Linux Linux kernel=3.0.4
Linux Linux kernel=3.0.5
Linux Linux kernel=3.0.6
Linux Linux kernel=3.0.7
Linux Linux kernel=3.0.8
Linux Linux kernel=3.0.9
Linux Linux kernel=3.0.10
Linux Linux kernel=3.0.11
Linux Linux kernel=3.0.12
Linux Linux kernel=3.0.13
Linux Linux kernel=3.0.14
Linux Linux kernel=3.0.15
Linux Linux kernel=3.0.16
Linux Linux kernel=3.0.17
Linux Linux kernel=3.0.18
Linux Linux kernel=3.0.19
Linux Linux kernel=3.0.20
Linux Linux kernel=3.0.21
Linux Linux kernel=3.0.22
Linux Linux kernel=3.0.23
Linux Linux kernel=3.0.24
Linux Linux kernel=3.0.25
Linux Linux kernel=3.0.26
Linux Linux kernel=3.0.27
Linux Linux kernel=3.0.28
Linux Linux kernel=3.0.29
Linux Linux kernel=3.0.30
Linux Linux kernel=3.0.31
Linux Linux kernel=3.0.32
Linux Linux kernel=3.0.33
Linux Linux kernel=3.0.34
Linux Linux kernel=3.0.35
Linux Linux kernel=3.0.36
Linux Linux kernel=3.0.37
Linux Linux kernel=3.0.38
Linux Linux kernel=3.0.39
Linux Linux kernel=3.0.40
Linux Linux kernel=3.0.41
Linux Linux kernel=3.0.42
Linux Linux kernel=3.0.43
Linux Linux kernel=3.0.44
Linux Linux kernel=3.0.45
Linux Linux kernel=3.0.46
Linux Linux kernel=3.0.47
Linux Linux kernel=3.0.48
Linux Linux kernel=3.0.49
Linux Linux kernel=3.0.50
Linux Linux kernel=3.0.51
Linux Linux kernel=3.0.52
Linux Linux kernel=3.0.53
Linux Linux kernel=3.0.54
Linux Linux kernel=3.0.55
Linux Linux kernel=3.0.56
Linux Linux kernel=3.0.57
Linux Linux kernel=3.0.58
Linux Linux kernel=3.0.59
Linux Linux kernel=3.0.60
Linux Linux kernel=3.0.61
Linux Linux kernel=3.0.62
Linux Linux kernel=3.0.63
Linux Linux kernel=3.0.64
Linux Linux kernel=3.0.65
Linux Linux kernel=3.0.66
Linux Linux kernel=3.0.67
Linux Linux kernel=3.0.68
Linux Linux kernel=3.1
Linux Linux kernel=3.1-rc1
Linux Linux kernel=3.1-rc2
Linux Linux kernel=3.1-rc3
Linux Linux kernel=3.1-rc4
Linux Linux kernel=3.1.1
Linux Linux kernel=3.1.2
Linux Linux kernel=3.1.3
Linux Linux kernel=3.1.4
Linux Linux kernel=3.1.5
Linux Linux kernel=3.1.6
Linux Linux kernel=3.1.7
Linux Linux kernel=3.1.8
Linux Linux kernel=3.1.9
Linux Linux kernel=3.1.10
Linux Linux kernel=3.2
Linux Linux kernel=3.2-rc2
Linux Linux kernel=3.2-rc3
Linux Linux kernel=3.2-rc4
Linux Linux kernel=3.2-rc5
Linux Linux kernel=3.2-rc6
Linux Linux kernel=3.2-rc7
Linux Linux kernel=3.2.1
Linux Linux kernel=3.2.2
Linux Linux kernel=3.2.3
Linux Linux kernel=3.2.4
Linux Linux kernel=3.2.5
Linux Linux kernel=3.2.6
Linux Linux kernel=3.2.7
Linux Linux kernel=3.2.8
Linux Linux kernel=3.2.9
Linux Linux kernel=3.2.10
Linux Linux kernel=3.2.11
Linux Linux kernel=3.2.12
Linux Linux kernel=3.2.13
Linux Linux kernel=3.2.14
Linux Linux kernel=3.2.15
Linux Linux kernel=3.2.16
Linux Linux kernel=3.2.17
Linux Linux kernel=3.2.18
Linux Linux kernel=3.2.19
Linux Linux kernel=3.2.20
Linux Linux kernel=3.2.21
Linux Linux kernel=3.2.22
Linux Linux kernel=3.2.23
Linux Linux kernel=3.2.24
Linux Linux kernel=3.2.25
Linux Linux kernel=3.2.26
Linux Linux kernel=3.2.27
Linux Linux kernel=3.2.28
Linux Linux kernel=3.2.29
Linux Linux kernel=3.2.30
Linux Linux kernel=3.3
Linux Linux kernel=3.3-rc1
Linux Linux kernel=3.3-rc2
Linux Linux kernel=3.3-rc3
Linux Linux kernel=3.3-rc4
Linux Linux kernel=3.3-rc5
Linux Linux kernel=3.3-rc6
Linux Linux kernel=3.3-rc7
Linux Linux kernel=3.3.1
Linux Linux kernel=3.3.2
Linux Linux kernel=3.3.3
Linux Linux kernel=3.3.4
Linux Linux kernel=3.3.5
Linux Linux kernel=3.3.6
Linux Linux kernel=3.3.7
Linux Linux kernel=3.3.8
Linux Linux kernel=3.4
Linux Linux kernel=3.4-rc1
Linux Linux kernel=3.4-rc2
Linux Linux kernel=3.4-rc3
Linux Linux kernel=3.4-rc4
Linux Linux kernel=3.4-rc5
Linux Linux kernel=3.4-rc6
Linux Linux kernel=3.4-rc7
Linux Linux kernel=3.4.1
Linux Linux kernel=3.4.2
Linux Linux kernel=3.4.3
Linux Linux kernel=3.4.4
Linux Linux kernel=3.4.5
Linux Linux kernel=3.4.6
Linux Linux kernel=3.4.7
Linux Linux kernel=3.4.8
Linux Linux kernel=3.4.9
Linux Linux kernel=3.4.10
Linux Linux kernel=3.4.11
Linux Linux kernel=3.4.12
Linux Linux kernel=3.4.13
Linux Linux kernel=3.4.14
Linux Linux kernel=3.4.15
Linux Linux kernel=3.4.16
Linux Linux kernel=3.4.17
Linux Linux kernel=3.4.18
Linux Linux kernel=3.4.19
Linux Linux kernel=3.4.20
Linux Linux kernel=3.4.21
Linux Linux kernel=3.4.22
Linux Linux kernel=3.4.23
Linux Linux kernel=3.4.24
Linux Linux kernel=3.4.25
Linux Linux kernel=3.4.26
Linux Linux kernel=3.4.27
Linux Linux kernel=3.4.28
Linux Linux kernel=3.4.29
Linux Linux kernel=3.4.30
Linux Linux kernel=3.4.31
Linux Linux kernel=3.4.32
Linux Linux kernel=3.5.1
Linux Linux kernel=3.5.2
Linux Linux kernel=3.5.3
Linux Linux kernel=3.5.4
Linux Linux kernel=3.5.5
Linux Linux kernel=3.5.6
Linux Linux kernel=3.5.7
Linux Linux kernel=3.6
Linux Linux kernel=3.6.1
Linux Linux kernel=3.6.2
Linux Linux kernel=3.6.3
Linux Linux kernel=3.6.4
Linux Linux kernel=3.6.5
Linux Linux kernel=3.6.6
Linux Linux kernel=3.6.7
Linux Linux kernel=3.6.8
Linux Linux kernel=3.6.9
Linux Linux kernel=3.6.10
Linux Linux kernel=3.6.11
Linux Linux kernel=3.7
Linux Linux kernel=3.7.1
Linux Linux kernel=3.7.2
Linux Linux kernel=3.7.3
Linux Linux kernel=3.7.4
Linux Linux kernel=3.7.5
Linux Linux kernel=3.7.6
Linux Linux kernel=3.7.7
Linux Linux kernel=3.7.8
Linux Linux kernel=3.7.9
Linux Linux kernel=3.7.10
Linux Linux kernel=3.8.0
Linux Linux kernel=3.8.1
Linux Linux kernel=3.8.2
Linux Linux kernel=3.8.3
Linux Linux kernel=3.8.4
Linux Linux kernel=3.8.5
Linux Linux kernel=3.8.6
redhat Enterprise Linux=6.0
redhat Enterprise MRG=2.0
Linux Linux kernel>=3.1<3.2.44
Linux Linux kernel>=3.3<3.4.49
Linux Linux kernel>=3.5<3.8.8
SUSE Linux Enterprise Desktop=11-sp3
SUSE Linux Enterprise High Availability Extension=11-sp3
SUSE Linux Enterprise Server=11-sp3
SUSE Linux Enterprise Server=11-sp3
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-1
Remediation
Event History
Apr 15, 2013
Data Sourced
via Red Hat·11:21 AM
DescriptionSeverityAffected Software
Apr 29, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:02 PM
Description
Sep 20, 2024
Data Sourced
via Ubuntu·12:58 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-3301?
CVE-2013-3301 has a medium severity rating due to its potential to cause system instability and denial of service.
2
How do I fix CVE-2013-3301?
To fix CVE-2013-3301, upgrade to a patched version of the Linux kernel, such as 5.10.223-1 or higher.
3
Which versions of Linux kernel are affected by CVE-2013-3301?
CVE-2013-3301 affects Linux kernel versions from 3.1 to 3.8.7 and certain distributions such as Red Hat Enterprise Linux 6.0.
4
What is the nature of the vulnerability in CVE-2013-3301?
CVE-2013-3301 is a NULL pointer dereference flaw that occurs in function and stack tracer files of the Linux kernel.
5
Are there any known exploits for CVE-2013-3301?
As of now, there are no widely known exploits specifically targeting CVE-2013-3301, but the vulnerability could be leveraged by an attacker with sufficient privileges.