VULNERABILITY INTELLIGENCE

CVE-2013-6431

CVSS score4.7 MEDIUM
EPSS probability0.43%
CISA KEVNot currently listed
Published2013-12-09
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:N/I:N/A:C

Description

The fib6_add function in net/ipv6/ip6_fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability for an IPv6 SIOCADDRT ioctl call.

Primary references