CVE-2013-2140

Published: 5 June 2013

The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature.

From the Ubuntu Security Team

A flaw was discovered in the Xen subsystem of the Linux kernel when it provides read-only access to a disk that supports TRIM or SCSI UNMAP to a guest OS. A privileged user in the guest OS could exploit this flaw to destroy data on the disk, even though the guest OS should not be able to write to the disk.

Notes

diff is e79ab45..4119bcd, patch not yet in tree

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2140
• http://www.openwall.com/lists/oss-security/2013/06/05/18
• https://ubuntu.com/security/notices/USN-1938-1
• https://ubuntu.com/security/notices/USN-1943-1
• https://ubuntu.com/security/notices/USN-1944-1
• https://ubuntu.com/security/notices/USN-1945-1
• https://ubuntu.com/security/notices/USN-1947-1
• https://ubuntu.com/security/notices/USN-1946-1
• https://ubuntu.com/security/notices/USN-2038-1
• https://ubuntu.com/security/notices/USN-2039-1
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1188351