VULNERABILITY INTELLIGENCE

CVE-2013-4300

CVSS score7.2 HIGH
EPSS probability0.42%
CISA KEVNot currently listed
Published2013-09-25
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain privileges via PID spoofing.

Primary references