Skip to content
OpenAdvisories
Unscored CVE-2013-4299 EUVD-2013-4193GHSA-rw3x-fqfm-qr37

Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain s…

Published Oct 24, 2013 · Updated Aug 6, 2024 · Assigned by redhat

Description

Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 3.11.6-2 —
Debian 13 linux 3.11.6-2 —
Debian 12 linux 3.11.6-2 —
Debian 6.0 linux-2.6 2.6.32-48squeeze5 DSA-2906-1
ReleasePackageFixed inAdvisory
RHEL 6 perf +15 2.6.32-358.23.2.el6 RHSA-2013:1436
RHEL 5 kernel +12 2.6.18-348.21.1.el5 RHSA-2013:1860, RHSA-2013:1449
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 6.3 EUS perf +15 2.6.32-279.37.2.el6 RHSA-2013:1783, RHSA-2013:1450
RHEL 6.2 EUS perf +15 2.6.32-220.45.1.el6 RHSA-2013:1519
Red Hat OpenStack 3 perf +9 2.6.32-358.123.4.openstack.el6 RHSA-2013:1520
Red Hat MRG 2 kernel-rt +11 3.8.13-rt14.25.el6rt RHSA-2013:1490

Advisories 9

References