CVE-2013-3301: linux linux_kernel
Vulnerability summary
CVE-2013-3301 is a high (CVSS 7.2) vulnerability in linux linux_kernel. EPSS estimates a 0.98% chance of exploitation in the next 30 days, higher than 61.7% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 4Timeline
- 29-04-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for write access to the (1) set_ftrace_pid or (2) set_graph_function file, and then making an lseek system call.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.98%
Chance of exploitation in the next 30 days
Percentile
62%
Versus all other CVEs
30-day change
0.00 pp
From 0.98% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundLinux
Maturity: poc
Linux Kernel 3.2.1 - Tracing Multiple Local Denial of Service Vulnerabilities
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu11 products
- linux< 3.11.0-12.19 | < 4.2.0-16.19
- linux-aws< 4.4.0-1002.2 | < 4.4.0-1001.10
- linux-gke< 4.4.0-1003.3
- linux-goldfish< 3.4.0-4.27
- linux-hwe< 4.8.0-36.36~16.04.1
Suse3 products
Redhat2 products
- enterprise_linuxEOL6.0
- enterprise_mrg2.0
Debian1 product
- linux< 3.8.11-1
Linux1 product
- linux_kernel≥ 3.1, < 3.2.44 | ≥ 3.3, < 3.4.49 | ≥ 3.5, < 3.8.8
5 vendors · 18 products
References
23 links- www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.8X Refsource CONFIRMMailing ListThird Party AdvisoryREPORT
- github.com/torvalds/linux/commit/6a76f8c0ab19f215af2a3442870eeb5f0e81998dX Refsource CONFIRMExploitREPORT
- lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- lists.opensuse.org/opensuse-updates/2013-12/msg00129.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
Show all 23 references
- bugzilla.redhat.com/show_bug.cgi?id=952197X Refsource CONFIRMIssue TrackingThird Party AdvisoryREPORT
- git.kernel.orgREPORT
