CVE-2013-7421
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2013-7421
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel Crypto API 本地安全绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux kernel 3.18.5之前版本的Crypto API中存在安全漏洞，该漏洞源于Crypto子系统没有正确处理模块的自动加载。本地攻击者可借助request_module（）调用利用该漏洞加载任意内核模块。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2013-7421
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCVerified env Premium
Reproduced successfully in a real sandbox· Below is the actual recording of building the environment and exploiting the vulnerability.
Success marker:
VULNERABLE: AF_ALG bind() passes salg_name to request_module() without sanitization - arbitrary kernel module loading possible (CVE-2013-7421)Reproduction recording is a Pro+ exclusive
Watch the full sandbox build + live exploit recording for this CVE. Limited-time ¥499/mo.
Upgrade to Pro+claude_code · 3390 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2013-7421
请登录查看更多情报信息。
Patches & Fixes for CVE-2013-7421 (2)
Vendor Advisories for CVE-2013-7421 (12)
- https://bugzilla.redhat.com/show_bug.cgi?id=1185469x_refsource_CONFIRM
- 🔗 USN-2546-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntu Read full article vendor-advisoryx_refsource_UBUNTU
Mailing List Discussions for CVE-2013-7421 (1)
Security Blog Posts for CVE-2013-7421 (1)
- https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWux_refsource_MISC
Other References for CVE-2013-7421 (4)
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5x_refsource_CONFIRM
Same Patch Batch · n/a · 2015-03-02 · 5 CVEs total
| CVE-2014-8160 | Linux kernel 安全绕过漏洞 | |
| CVE-2014-9644 | Linux kernel Crypto API 本地安全绕过漏洞 | |
| CVE-2015-0239 | Linux kernel 竞争条件问题漏洞 | |
| CVE-2014-8921 | IBM Notes Traveler Companion for Window Phone Notes Traveler 信息泄露漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2025-15687
Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb - CVE-2025-15686
Open5GS HSS Service fd_msg_sess_get denial of service - CVE-2025-15685
Open5GS freeDiameter memory corruption - CVE-2025-15684
Open5GS CER init.c diam_log_func assertion - CVE-2024-14044
Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer ove
V. Comments for CVE-2013-7421
No comments yet