VULNERABILITY INTELLIGENCE
CVE-2013-2140
CVSS score3.8 LOW
EPSS probability1.01%
CISA KEVNot currently listed
Published2013-09-25
Last modified2026-06-16
CVSS vectorAV:A/AC:M/Au:S/C:N/I:P/A:P
Description
The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature.
Weakness classification
- CWE-20: Improper Input Validation