CVE-2013-6380: The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12.1 does no...

Security readout for executives and security teams

This is an older Linux kernel flaw in the aacraid storage driver. A local user could trigger a kernel crash through a driver control request. The provided sources do not show remote exposure or confirmed active exploitation. Likely exposure is Linux systems running kernel through 3.12.1 where the aacraid driver is present or reachable. Risk depends on local user access and hardware or driver configuration. The bundle does not identify a network attack path or precise downstream package versions beyond vendor advisories. Handle during legacy Linux risk reduction unless affected storage servers allow untrusted local access. Escalate if critical infrastructure still runs old kernels with aacraid enabled and cannot be patched quickly. Mitigation focus: Apply vendor kernel updates referencing CVE-2013-6380.; Prioritize systems using the aacraid driver or Adaptec AAC RAID hardware.; Restrict untrusted local shell access on exposed legacy systems..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.