CVE-2013-6383: The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not re...

Security readout for executives and security teams

CVE-2013-6383 is a Linux kernel flaw in the aacraid storage driver. A local user could bypass an intended raw I/O capability check through a crafted ioctl request. This is not a remote internet-facing issue, but it matters on multi-user Linux systems or hosts where local account compromise is a realistic path. Exposure is most likely on Linux systems running kernels before 3.11.8, particularly where the aacraid driver is present or available. Distribution-specific exposure depends on vendor kernel backports and advisory coverage, so kernel package versions must be checked against vendor guidance. Handle through normal kernel patch governance, with higher priority for shared Linux servers and environments exposed to local code execution. No supplied source supports emergency treatment for internet-wide exploitation. Mitigation focus: Apply vendor kernel updates that include the aacraid ioctl capability check fix.; Check Ubuntu and Red Hat advisories for fixed package versions in supported distributions.; Prioritize multi-user servers and systems where untrusted local users can run code..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.