CVE-2013-7348
published 2014-04-01CVE-2013-7348: Double free vulnerability in the ioctx_alloc function in fs/aio.c in the Linux kernel before 3.12.4 allows local users to cause a denial of service (system…
PriorityP414medium4.6CVSS 2.0
AVLACLAuNCPIPAP
EPSS
0.36%
29.5th percentile
Double free vulnerability in the ioctx_alloc function in fs/aio.c in the Linux kernel before 3.12.4 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via vectors involving an error condition in the aio_setup_ring function.
Affected
294 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 3.13.4-1 (bookworm) | linux 3.13.4-1 (bookworm) |
| linux | linux_kernel | <= 3.12.3 | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
CVSS provenance
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
osv4.6MEDIUM
vendor_debian4.6MEDIUM
vendor_redhat4.6MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: aio: double free in ioctx_alloc
vendor_redhat·2013-11-19·CVSS 4.6
CVE-2013-7348 [MEDIUM] kernel: aio: double free in ioctx_alloc
kernel: aio: double free in ioctx_alloc
Double free vulnerability in the ioctx_alloc function in fs/aio.c in the Linux kernel before 3.12.4 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via vectors involving an error condition in the aio_setup_ring function.
Statement: Not vulnerable.
This issued does not affect Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.
Package: kernel (Red Hat Enterprise Linux 5) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: realtime-kernel (Red Hat Enterprise MRG 2) - Not affected
Debian
CVE-2013-7348: linux - Double free vulnerability in the ioctx_alloc function in fs/aio.c in the Linux k...
vendor_debian·2013·CVSS 4.6
CVE-2013-7348 [MEDIUM] CVE-2013-7348: linux - Double free vulnerability in the ioctx_alloc function in fs/aio.c in the Linux k...
Double free vulnerability in the ioctx_alloc function in fs/aio.c in the Linux kernel before 3.12.4 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via vectors involving an error condition in the aio_setup_ring function.
Scope: local
bookworm: resolved (fixed in 3.13.4-1)
bullseye: resolved (fixed in 3.13.4-1)
forky: resolved (fixed in 3.13.4-1)
sid: resolved (fixed in 3.13.4-1)
trixie: resolved (fixed in 3.13.4-1)
GHSA
GHSA-4rvv-3767-jm7p: Double free vulnerability in the ioctx_alloc function in fs/aio
ghsa_unreviewed·2022-05-17
CVE-2013-7348 [MEDIUM] GHSA-4rvv-3767-jm7p: Double free vulnerability in the ioctx_alloc function in fs/aio
Double free vulnerability in the ioctx_alloc function in fs/aio.c in the Linux kernel before 3.12.4 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via vectors involving an error condition in the aio_setup_ring function.
OSV
CVE-2013-7348: Double free vulnerability in the ioctx_alloc function in fs/aio
osv·2014-04-01·CVSS 4.6
CVE-2013-7348 [MEDIUM] CVE-2013-7348: Double free vulnerability in the ioctx_alloc function in fs/aio
Double free vulnerability in the ioctx_alloc function in fs/aio.c in the Linux kernel before 3.12.4 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via vectors involving an error condition in the aio_setup_ring function.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-7348 kernel: aio: double free in ioctx_alloc [fedora-all]
bugzilla·2014-04-01·CVSS 4.6
CVE-2013-7348 [MEDIUM] CVE-2013-7348 kernel: aio: double free in ioctx_alloc [fedora-all]
CVE-2013-7348 kernel: aio: double free in ioctx_alloc [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this issue affects multip
Bugzilla
CVE-2013-7348 kernel: aio: double free in ioctx_alloc
bugzilla·2014-04-01·CVSS 4.6
CVE-2013-7348 [MEDIUM] CVE-2013-7348 kernel: aio: double free in ioctx_alloc
CVE-2013-7348 kernel: aio: double free in ioctx_alloc
ioctx_alloc() calls aio_setup_ring() to allocate a ring. If aio_setup_ring() fails to do so it would call aio_free_ring() before returning, but ioctx_alloc() would call aio_free_ring() again causing a double free of the ring.
Upstream fix:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d558023207e008a4476a3b7bb8706b2a2bf5d84f
References:
http://seclists.org/oss-sec/2014/q1/711
Discussion:
Statement:
Not vulnerable.
This issued does not affect Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.
---
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 1083271]
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d558023207e008a4476a3b7bb8706b2a2bf5d84fhttp://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4http://www.openwall.com/lists/oss-security/2014/03/31/10https://github.com/torvalds/linux/commit/d558023207e008a4476a3b7bb8706b2a2bf5d84fhttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d558023207e008a4476a3b7bb8706b2a2bf5d84fhttp://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4http://www.openwall.com/lists/oss-security/2014/03/31/10https://github.com/torvalds/linux/commit/d558023207e008a4476a3b7bb8706b2a2bf5d84f
2014-04-01
Published