Launchpad.net

CVE 2013-6383

The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capability, which allows local users to bypass intended access restrictions via a crafted ioctl call.

Related bugs and status

CVE-2013-6383 (Candidate) is related to these bugs:

Bug #1256094: CVE-2013-6383

		In	Importance	Status
1256094	CVE-2013-6383	linux (Ubuntu)	Medium	Invalid
1256094	CVE-2013-6383	linux-fsl-imx51 (Ubuntu)	Medium	Invalid
1256094	CVE-2013-6383	linux-mvl-dove (Ubuntu)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-backport-maverick (Ubuntu)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-lts-backport-natty (Ubuntu)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-ti-omap4 (Ubuntu)	Medium	Invalid
1256094	CVE-2013-6383	linux-ec2 (Ubuntu)	Medium	Invalid
1256094	CVE-2013-6383	linux (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-ec2 (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-fsl-imx51 (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-backport-maverick (Ubuntu Trusty)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-mvl-dove (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-ti-omap4 (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-backport-maverick (Ubuntu Saucy)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-lts-backport-natty (Ubuntu Saucy)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-lts-backport-maverick (Ubuntu Raring)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-lts-backport-natty (Ubuntu Raring)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-lts-backport-maverick (Ubuntu Quantal)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-lts-backport-natty (Ubuntu Quantal)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux (Ubuntu Precise)	Medium	Fix Released
1256094	CVE-2013-6383	linux-ec2 (Ubuntu Precise)	Medium	Invalid
1256094	CVE-2013-6383	linux-fsl-imx51 (Ubuntu Precise)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-backport-maverick (Ubuntu Precise)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-mvl-dove (Ubuntu Precise)	Medium	Invalid
1256094	CVE-2013-6383	linux-ti-omap4 (Ubuntu Precise)	Medium	Fix Released
1256094	CVE-2013-6383	linux-lts-backport-maverick (Ubuntu Lucid)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-lts-backport-natty (Ubuntu Lucid)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-armadaxp (Ubuntu)	Medium	Invalid
1256094	CVE-2013-6383	linux-armadaxp (Ubuntu Precise)	Medium	Fix Released
1256094	CVE-2013-6383	linux-armadaxp (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-saucy (Ubuntu)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-saucy (Ubuntu Precise)	Medium	Fix Released
1256094	CVE-2013-6383	linux-lts-saucy (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-quantal (Ubuntu)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-quantal (Ubuntu Precise)	Medium	Fix Released
1256094	CVE-2013-6383	linux-lts-quantal (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-raring (Ubuntu)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-raring (Ubuntu Precise)	Medium	Fix Released
1256094	CVE-2013-6383	linux-lts-raring (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-trusty (Ubuntu)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-trusty (Ubuntu Precise)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-trusty (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-backport-maverick (Ubuntu Utopic)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-lts-backport-natty (Ubuntu Utopic)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux (Ubuntu Vivid)	Medium	Invalid
1256094	CVE-2013-6383	linux-armadaxp (Ubuntu Vivid)	Medium	Invalid
1256094	CVE-2013-6383	linux-ec2 (Ubuntu Vivid)	Medium	Invalid
1256094	CVE-2013-6383	linux-fsl-imx51 (Ubuntu Vivid)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-backport-maverick (Ubuntu Vivid)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-lts-backport-natty (Ubuntu Vivid)	Undecided	Won't Fix
1256094	CVE-2013-6383	linux-lts-quantal (Ubuntu Vivid)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-raring (Ubuntu Vivid)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-saucy (Ubuntu Vivid)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-trusty (Ubuntu Vivid)	Medium	Invalid
1256094	CVE-2013-6383	linux-mvl-dove (Ubuntu Vivid)	Medium	Invalid
1256094	CVE-2013-6383	linux-ti-omap4 (Ubuntu Vivid)	Medium	Invalid
1256094	CVE-2013-6383	linux-goldfish (Ubuntu)	Medium	New
1256094	CVE-2013-6383	linux-goldfish (Ubuntu Precise)	Medium	Invalid
1256094	CVE-2013-6383	linux-goldfish (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-goldfish (Ubuntu Vivid)	Medium	Won't Fix
1256094	CVE-2013-6383	linux-flo (Ubuntu)	Medium	New
1256094	CVE-2013-6383	linux-flo (Ubuntu Precise)	Medium	Invalid
1256094	CVE-2013-6383	linux-flo (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-flo (Ubuntu Vivid)	Medium	Won't Fix
1256094	CVE-2013-6383	linux-mako (Ubuntu)	Medium	New
1256094	CVE-2013-6383	linux-mako (Ubuntu Precise)	Medium	Invalid
1256094	CVE-2013-6383	linux-mako (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-mako (Ubuntu Vivid)	Medium	Won't Fix
1256094	CVE-2013-6383	linux-lts-utopic (Ubuntu)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-utopic (Ubuntu Precise)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-utopic (Ubuntu Trusty)	Medium	Invalid
1256094	CVE-2013-6383	linux-lts-utopic (Ubuntu Vivid)	Medium	Invalid
1256094	CVE-2013-6383	linux-manta (Ubuntu)	Medium	Invalid

Bug #1256919: CVE-2013-6405

		In	Importance	Status
1256919	CVE-2013-6405	linux (Ubuntu)	Medium	Invalid
1256919	CVE-2013-6405	linux-fsl-imx51 (Ubuntu)	Medium	Invalid
1256919	CVE-2013-6405	linux-mvl-dove (Ubuntu)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-backport-maverick (Ubuntu)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux-lts-backport-natty (Ubuntu)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux-ti-omap4 (Ubuntu)	Medium	Invalid
1256919	CVE-2013-6405	linux-ec2 (Ubuntu)	Medium	Invalid
1256919	CVE-2013-6405	linux (Ubuntu Trusty)	Medium	Invalid
1256919	CVE-2013-6405	linux-ec2 (Ubuntu Trusty)	Medium	Invalid
1256919	CVE-2013-6405	linux-fsl-imx51 (Ubuntu Trusty)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-backport-maverick (Ubuntu Trusty)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux-mvl-dove (Ubuntu Trusty)	Medium	Invalid
1256919	CVE-2013-6405	linux-ti-omap4 (Ubuntu Trusty)	Medium	Invalid
1256919	CVE-2013-6405	linux (Ubuntu Saucy)	Medium	Won't Fix
1256919	CVE-2013-6405	linux-ec2 (Ubuntu Saucy)	Medium	Invalid
1256919	CVE-2013-6405	linux-fsl-imx51 (Ubuntu Saucy)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-backport-maverick (Ubuntu Saucy)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux-lts-backport-natty (Ubuntu Saucy)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux-mvl-dove (Ubuntu Saucy)	Medium	Invalid
1256919	CVE-2013-6405	linux-ti-omap4 (Ubuntu Saucy)	Medium	Won't Fix
1256919	CVE-2013-6405	linux-lts-backport-maverick (Ubuntu Raring)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux-lts-backport-natty (Ubuntu Raring)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux (Ubuntu Quantal)	Medium	Won't Fix
1256919	CVE-2013-6405	linux-ec2 (Ubuntu Quantal)	Medium	Invalid
1256919	CVE-2013-6405	linux-fsl-imx51 (Ubuntu Quantal)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-backport-maverick (Ubuntu Quantal)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux-lts-backport-natty (Ubuntu Quantal)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux-mvl-dove (Ubuntu Quantal)	Medium	Invalid
1256919	CVE-2013-6405	linux-ti-omap4 (Ubuntu Quantal)	Medium	Won't Fix
1256919	CVE-2013-6405	linux (Ubuntu Precise)	Medium	Invalid
1256919	CVE-2013-6405	linux-ec2 (Ubuntu Precise)	Medium	Invalid
1256919	CVE-2013-6405	linux-fsl-imx51 (Ubuntu Precise)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-backport-maverick (Ubuntu Precise)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux-mvl-dove (Ubuntu Precise)	Medium	Invalid
1256919	CVE-2013-6405	linux-ti-omap4 (Ubuntu Precise)	Medium	Invalid
1256919	CVE-2013-6405	linux (Ubuntu Lucid)	Medium	Fix Released
1256919	CVE-2013-6405	linux-ec2 (Ubuntu Lucid)	Medium	Fix Released
1256919	CVE-2013-6405	linux-fsl-imx51 (Ubuntu Lucid)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-backport-maverick (Ubuntu Lucid)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux-lts-backport-natty (Ubuntu Lucid)	Undecided	Won't Fix
1256919	CVE-2013-6405	linux-mvl-dove (Ubuntu Lucid)	Medium	Invalid
1256919	CVE-2013-6405	linux-ti-omap4 (Ubuntu Lucid)	Medium	Invalid
1256919	CVE-2013-6405	linux-armadaxp (Ubuntu)	Medium	Invalid
1256919	CVE-2013-6405	linux-armadaxp (Ubuntu Lucid)	Medium	Invalid
1256919	CVE-2013-6405	linux-armadaxp (Ubuntu Precise)	Medium	Invalid
1256919	CVE-2013-6405	linux-armadaxp (Ubuntu Quantal)	Medium	Won't Fix
1256919	CVE-2013-6405	linux-armadaxp (Ubuntu Saucy)	Medium	Invalid
1256919	CVE-2013-6405	linux-armadaxp (Ubuntu Trusty)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-saucy (Ubuntu)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-saucy (Ubuntu Lucid)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-saucy (Ubuntu Precise)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-saucy (Ubuntu Quantal)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-saucy (Ubuntu Saucy)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-saucy (Ubuntu Trusty)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-quantal (Ubuntu)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-quantal (Ubuntu Lucid)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-quantal (Ubuntu Precise)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-quantal (Ubuntu Quantal)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-quantal (Ubuntu Saucy)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-quantal (Ubuntu Trusty)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-raring (Ubuntu)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-raring (Ubuntu Lucid)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-raring (Ubuntu Precise)	Medium	Won't Fix
1256919	CVE-2013-6405	linux-lts-raring (Ubuntu Quantal)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-raring (Ubuntu Saucy)	Medium	Invalid
1256919	CVE-2013-6405	linux-lts-raring (Ubuntu Trusty)	Medium	Invalid

Bug #1266525: linux: 2.6.32-56.118 -proposed tracker

		In	Importance	Status
1266525	linux: 2.6.32-56.118 -proposed tracker	linux (Ubuntu)	Undecided	Invalid
1266525	linux: 2.6.32-56.118 -proposed tracker	linux (Ubuntu Lucid)	Medium	Fix Released
1266525	linux: 2.6.32-56.118 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1266525	linux: 2.6.32-56.118 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1266525	linux: 2.6.32-56.118 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1266525	linux: 2.6.32-56.118 -proposed tracker	Kernel SRU Workflow prepare-package-lbm	Medium	Fix Released
1266525	linux: 2.6.32-56.118 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1266525	linux: 2.6.32-56.118 -proposed tracker	Kernel SRU Workflow prepare-package-ports-meta	Medium	Fix Released
1266525	linux: 2.6.32-56.118 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1266525	linux: 2.6.32-56.118 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1266525	linux: 2.6.32-56.118 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1266525	linux: 2.6.32-56.118 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1266525	linux: 2.6.32-56.118 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1266525	linux: 2.6.32-56.118 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released
1266525	linux: 2.6.32-56.118 -proposed tracker	Kernel SRU Workflow automated-testing	Undecided	Fix Released

Bug #1266612: linux-ec2: 2.6.32-361.74 -proposed tracker

		In	Importance	Status
1266612	linux-ec2: 2.6.32-361.74 -proposed tracker	linux-ec2 (Ubuntu)	Medium	Invalid
1266612	linux-ec2: 2.6.32-361.74 -proposed tracker	linux-ec2 (Ubuntu Lucid)	Medium	Fix Released
1266612	linux-ec2: 2.6.32-361.74 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1266612	linux-ec2: 2.6.32-361.74 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1266612	linux-ec2: 2.6.32-361.74 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1266612	linux-ec2: 2.6.32-361.74 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1266612	linux-ec2: 2.6.32-361.74 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1266612	linux-ec2: 2.6.32-361.74 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1266612	linux-ec2: 2.6.32-361.74 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1266612	linux-ec2: 2.6.32-361.74 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1266612	linux-ec2: 2.6.32-361.74 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1266612	linux-ec2: 2.6.32-361.74 -proposed tracker	Kernel SRU Workflow upload-to-ppa	Medium	Fix Released
1266612	linux-ec2: 2.6.32-361.74 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2013-6383

Related bugs and status

Related bugs

References