CVE-2013-6382: Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users t...

Security readout for executives and security teams

CVE-2013-6382 is an old Linux kernel XFS filesystem bug. A local actor with CAP_SYS_ADMIN could trigger memory corruption, causing a denial of service and possibly other unspecified impact. The sources do not show active exploitation, and the capability requirement makes broad remote exposure unlikely. Exposure is most plausible on legacy Linux systems running kernels through 3.12.1 with XFS enabled and local users, services, or containers holding CAP_SYS_ADMIN. Public source metadata does not identify precise affected distributions beyond referenced vendor advisories. Prioritize remediation for legacy Linux hosts, especially shared systems or container platforms granting broad administrative capabilities. Business urgency is lower than a remote unauthenticated flaw, but kernel memory corruption can still disrupt critical services if exposed to privileged local actors. Mitigation focus: Apply relevant vendor kernel updates from Ubuntu or other Linux vendor advisories.; Retire or upgrade Linux kernels through 3.12.1 where XFS is in use.; Restrict CAP_SYS_ADMIN to trusted processes and administrators only..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.