CVE-2013-7339: Null Pointer Dereference
Description of the problem: Binding might result in a NULL device which is later dereferenced in rdsibladdrcheck() function without checking.
A local unprivileged user could use this flaw to crash the system.
Upstream patch: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c2349758acf1874e4c2b93fe41d072336f1a31d0
References: http://seclists.org/oss-sec/2014/q1/628
Other sources
The rdsibladdrcheck function in net/rds/ib.c in the Linux kernel before 3.12.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.133-1Fixed in 6.12.22-1 - Upgrade
Upgrade
linux kernelto a version that resolves this vulnerability.Fixed in 3.12.8Patch c2349758acf1874e4c2b93fe41d072336f1a31d0 - Compensating control
On systems that lack RDS transports, limit or disable use of RDS socket binding (e.g., restrict access to applications/users that can perform the bind system call for RDS sockets) to reduce exposure to the NULL pointer dereference in rds_ib_laddr_check().
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7339?
CVE-2013-7339 is considered a medium severity vulnerability that can lead to a system crash.
How do I fix CVE-2013-7339?
To fix CVE-2013-7339, you should update your Linux kernel to version 3.12.9 or later.
Who is affected by CVE-2013-7339?
CVE-2013-7339 affects local unprivileged users on systems running vulnerable versions of the Linux kernel.
What are the potential impacts of exploiting CVE-2013-7339?
Exploiting CVE-2013-7339 can cause a denial of service by crashing the system.
Is there a patch available for CVE-2013-7339?
Yes, an upstream patch is available to address CVE-2013-7339 in the Linux kernel.