CVE-2013-4343

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-09-25 · updated 2026-06-16
Weakness: CWE-399

Description

Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call.

Affected products

Canonical Ubuntu Linux: 13.04, 13.10
Linux kernel: from 3.8 before 3.10.16; from 3.11 before 3.11.5 — fixed in 3.10.16, 3.11.5

How to fix

Upgrade to a fixed version: Linux kernel 3.10.16, 3.11.5. Check the vendor advisory for mitigations.

References

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html
http://marc.info/?l=linux-kernel&m=137889490510745&w=2
http://rhn.redhat.com/errata/RHSA-2013-1490.html
http://www.openwall.com/lists/oss-security/2013/09/12/3
http://www.spinics.net/lists/netdev/msg250066.html
http://www.ubuntu.com/usn/USN-2020-1
http://www.ubuntu.com/usn/USN-2023-1
http://www.ubuntu.com/usn/USN-2049-1
https://bugzilla.redhat.com/show_bug.cgi?id=1007733
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html

Get alerted when CVE-2013-4343 or the next vulnerability affects your stack