CVE-2013-7421

Published: 31 December 2013

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644.

From the Ubuntu Security Team

A flaw was discovered in the automatic loading of modules in the crypto subsystem of the Linux kernel. A local user could exploit this flaw to load installed kernel modules, increasing the attack surface and potentially using this to gain administrative privileges.

Notes

android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.04 preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7421
• https://lkml.org/lkml/2013/3/4/70
• https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5d26a105b5a7 (v3.19-rc1)
• https://ubuntu.com/security/notices/USN-2513-1
• https://ubuntu.com/security/notices/USN-2514-1
• https://ubuntu.com/security/notices/USN-2543-1
• https://ubuntu.com/security/notices/USN-2544-1
• https://ubuntu.com/security/notices/USN-2545-1
• https://ubuntu.com/security/notices/USN-2546-1
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1415507