CVE-2013-2140

kernel: xen: blkback: insufficient permission checks for BLKIF_OP_DISCARD

Published Sep 25, 2013 CVSS 2.0 · 3.8 Low EPSS 1.0% KEV · Not listed
Description
The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2013-2105 The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature.
Ubuntu USN Ubuntu USN USN-1938-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1943-1 Linux kernel (Raring HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-1944-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1945-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1946-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1947-1 Linux kernel (Quantal HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-2038-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2039-1 Linux kernel (OMAP4) vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00096}

epss

{'score': 0.0013}

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 3:27 PM
Reserved
Feb 19, 2013, 12:00 AM
Status
Modified
Published
Sep 25, 2013, 10:31 AM
Modified
Jun 16, 2026, 11:52 PM
Severity
Moderate
Public date
Jun 5, 2013, 12:00 AM