CVE-2013-4300
The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a...
CVE-2013-4300 is a high vulnerability (CVSS 7.2) in Linux Kernel, published September 25, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 37th percentile. Fixed in linux 3.11.5-1.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.42%EPSS, 37th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.11.5-1linux +2 more
Description
The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain privileges via PID spoofing.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain privileges via PID spoofing.
- Record
CVE-2013-4300- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain privileges via PID spoofing.
- Record
CVE-2013-4300- Updated
- 2026-11-02
EUVDEUVD-2013-4194No score
The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain privileges via PID spoofing.
- Record
EUVD-2013-4194- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-29ch-f7xh-hrh2No score
The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a...
The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain privileges via PID spoofing.
- Record
GHSA-29ch-f7xh-hrh2- Updated
- 2026-11-02
OSVBELL-CVE-2013-4300
CVE-2013-4300 does not affect BellSoft software
- Record
BELL-CVE-2013-4300- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
OSVNo score
The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain privileges via PID spoofing.
- Record
CVE-2013-4300- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4300No score
The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain privileges via PID spoofing.
- Record
DEBIAN-CVE-2013-4300- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-4300No score
The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain privileges via PID spoofing.
- Record
UBUNTU-CVE-2013-4300- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d661684cf6820331feae71146c35da83d794467e
ubuntu.com/usn/USN-1995-1
github.com/torvalds/linux/commit/d661684cf6820331feae71146c35da83d794467e
bugzilla.redhat.com/show_bug.cgi?id=1004736
openwall.com/lists/oss-security/2013/09/05/3
kernel.org/pub/linux/kernel/v3.x/patch-3.11.bz2
Show 11 moreShow less
nvd.nist.gov/vuln/detail/CVE-2013-4300
docs.bell-sw.com/security/cves/CVE-2013-4300
security-tracker.debian.org/tracker/CVE-2013-4300
ubuntu.com/security/CVE-2013-4300
cve.org/CVERecord?id=CVE-2013-4300