PT-2013-5702 · Linux+1 · Linux Kernel+1

Published 2013-09-25 · Updated 2023-02-13 · CVE-2013-5634

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:A/AC:H/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.10

Description The issue affects the Linux kernel on the ARM platform when KVM is used, allowing host OS users to cause a denial of service, including a NULL pointer dereference, OOPS, and host OS crash, or possibly have other unspecified impacts by omitting vCPU initialization before a KVM GET REG LIST ioctl call.

Recommendations For Linux kernel versions prior to 3.10, ensure proper vCPU initialization before making a KVM GET REG LIST ioctl call to prevent potential denial of service or other impacts.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2013-5634

OPENSUSE-SU-2016_3021-1

Affected Products

Linux Kernel

Suse

References · 161

• 🔥 https://github.com/torvalds/linux/commit/e8180dcaa8470ceca21109f143876fdcd9fe050a · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e8180dcaa8470ceca21109f143876fdcd9fe050a · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-5634 · Security Note
• https://osv.dev/vulnerability/CVE-2013-5634 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-5634 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-5634 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-5634 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v3.x/patch-3.10.bz2 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-5634 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2013-5634 · Security Note
• https://github.com/violentshell/rover · Note
• https://github.com/jduck/challack · Note
• https://github.com/Gnoxter/mountain_goat · Note
• https://bugzilla.suse.com/979451 · Note
• https://bugzilla.suse.com/1003568 · Note