What’s Vulnerable › Vulnerabilities

CVE-2013-7446

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2015-12-28 · updated 2026-06-17

Description

Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls.

Affected products

• Linux kernel: through 4.3.2

References

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7d267278a9ece963d77eefec61630223fce08c6c
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00033.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00034.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00035.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00037.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00038.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00041.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00042.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00044.html

Get alerted when CVE-2013-7446 or the next vulnerability affects your stack