CVE-2013-4312: Buffer Overflow
It was found that process could allocate and accumulate far more FDs than the process' limit by sending them over a unix socket then closing them to keep the process' fd count low, which could result into a local DoS against kernel by depleting all available memory.
Upstream patch:
https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=712f4aad406b
Discussion:
https://lkml.org/lkml/2015/12/28/155
Other sources
The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/afunix.c and net/unix/garbage.c.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.249-1Fixed in 6.1.159-1Fixed in 6.1.162-1Fixed in 6.12.63-1Fixed in 6.12.73-1Fixed in 6.18.9-1Fixed in 6.18.12-1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 3.13.0-83.127 - Upgrade
Upgrade
ubuntu/linux-lts-utopicto a version that resolves this vulnerability.Fixed in 3.16.0-67.87~14.04.1 - Upgrade
Upgrade
ubuntu/linux-lts-vividto a version that resolves this vulnerability.Fixed in 3.19.0-56.62~14.04.1 - Upgrade
Upgrade
ubuntu/linux-lts-wilyto a version that resolves this vulnerability.Fixed in 4.2.0-30.35~14.04.1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 4.4.1
Event History
Frequently Asked Questions
What is CVE-2013-4312?
CVE-2013-4312 is a vulnerability in the Linux kernel that allows local users to bypass file-descriptor limits and cause a denial of service by sending each descriptor over a UNIX socket before closing it.
How can this vulnerability be exploited?
To exploit CVE-2013-4312, a local user would need to send each file descriptor over a UNIX socket before closing it.
What is the severity of CVE-2013-4312?
CVE-2013-4312 has a severity level of medium.
How can I fix CVE-2013-4312?
To fix CVE-2013-4312, it is recommended to update the Linux kernel to version 4.5~ or later.
Where can I find more information about CVE-2013-4312?
More information about CVE-2013-4312 can be found at the following references: [1] [2] [3].