CVE-2013-4300: The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check...

Security readout for executives and security teams

CVE-2013-4300 is a Linux kernel local privilege escalation issue. A capability check used the wrong namespace, allowing a local user to spoof a process ID and potentially gain higher privileges. This is not described as remotely exploitable in the provided sources. Exposure is most likely on legacy Linux systems running kernels before 3.11 or vendor kernels lacking the referenced fix. Risk is higher where untrusted local users, shared systems, or services with local execution paths exist. Prioritize remediation for legacy Linux systems with local users or shared workloads. This is a privilege escalation issue, so compromise of a low-privileged account could become broader system compromise. Mitigation focus: Upgrade affected Linux kernels to 3.11 or a vendor-supported fixed kernel.; Apply relevant vendor advisories, including Ubuntu USN-1995-1 or USN-1998-1 where applicable.; Confirm vendor backport status for long-term distribution kernels..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.