Privilege Escalation Vulnerability in Linux Kernel (CVE-2013-1959)
Summary
CVE-2013-1959: kernel/user_namespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uid_map and gid_map files, which allows local users to gain privileges by opening a file within an unpriv... Affects linux versions < 3.8.11-1. Fixed in 3.8.11-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system. The kernel's user namespace feature allows for the isolation of user and group IDs, which is crucial for maintaining security and privilege boundaries. However, a vulnerability was discovered in the handling of uid_map and gid_map files that could allow local users to escalate their privileges.
Vulnerability Detail
The vulnerability, identified as CVE-2013-1959, exists in the Linux kernel versions prior to 3.8.9. It arises from insufficient capability checks for the uid_map and gid_map files. This flaw allows local users to open these files within an unprivileged process and subsequently modify them in a privileged process, leading to potential privilege escalation. This could allow attackers to gain unauthorized access to system resources and perform actions with elevated privileges, posing a significant security risk.
How To Fix
Minimum fixed version
3.8.11-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, system administrators can restrict access to the uid_map and gid_map files by modifying file permissions. This can be done using the following command: sudo chmod 600 /proc/self/uid_map /proc/self/gid_map. However, this is not a permanent solution and upgrading the kernel is strongly recommended.
Conclusion
CVE-2013-1959 is a critical vulnerability in the Linux kernel that can lead to privilege escalation for local users. It is essential to upgrade to a patched version of the kernel to mitigate this risk. Additionally, using tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2013-1959 is a vulnerability in the Linux kernel that allows local users to escalate their privileges by manipulating uid_map and gid_map files.
The vulnerability affects Linux kernel versions prior to 3.8.9.
You can check your kernel version by running the command 'uname -r' in the terminal. If it is below 3.8.11-1, your system is vulnerable.
If an immediate upgrade is not possible, consider applying the temporary workaround by restricting access to the uid_map and gid_map files.
Vulert monitors open-source vulnerabilities in your software by analyzing a manifest file like package-lock.json, providing real-time alerts without requiring code access or installation.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
