CVE-2013-4247: Off-by-one error in the build_unc_path_to_root function in fs/cifs/connect.c in the Linux kernel before 3.9...

Security readout for executives and security teams

This CVE is a Linux kernel CIFS client flaw that can crash a system when handling a DFS share mount with an unexpected referral name length. The business impact is availability, not confirmed data theft. Risk is highest where older kernels mount SMB/CIFS DFS shares, especially from less-trusted sources. Exposure is likely limited to Linux systems running affected pre-3.9.6 kernels or vendor kernels missing the backport, with CIFS/SMB DFS share mounting in use. The bundle does not identify specific distributions, appliances, or packages beyond the Linux kernel context. Treat as a targeted availability risk for legacy Linux systems using CIFS DFS. It should not outrank actively exploited critical issues, but it warrants remediation during kernel maintenance where affected systems support important services. Mitigation focus: Upgrade to Linux kernel 3.9.6 or a vendor kernel containing the upstream fix.; Check distribution advisories for backported fixes tied to CVE-2013-4247.; Avoid mounting untrusted SMB/CIFS DFS shares from affected systems..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.