CVE-2013-1958

🗓️ 24 Apr 2013 19:00:00Reported by redhatType

The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.8.6 does not properly enforce capability requirements for controlling the PID value associated with a UNIX domain socket, allowing local users to bypass intended access restriction

Reporter	Title	Published	Views	Family All 11
Cvelist	CVE-2013-1958	24 Apr 201319:00	–	cvelist
Debian CVE	CVE-2013-1958	24 Apr 201319:00	–	debiancve
EUVD	EUVD-2013-1948	7 Oct 202500:30	–	euvd
NVD	CVE-2013-1958	24 Apr 201319:55	–	nvd
OSV	DEBIAN-CVE-2013-1958	24 Apr 201319:55	–	osv
Prion	Design/Logic Flaw	24 Apr 201319:55	–	prion
Positive Technologies	PT-2013-3491 · Linux · Linux Kernel	24 Apr 201300:00	–	ptsecurity
RedhatCVE	CVE-2013-1958	30 Oct 201510:14	–	redhatcve
seebug.org	Linux内核scm_check_creds安全绕过漏洞(CVE-2013-1958)	28 Apr 201300:00	–	seebug
SUSE CVE	SUSE CVE-2013-1958	15 Feb 202305:39	–	susecve

NVD

Node

linux linux_kernelRange≤3.8.5

linux linux_kernelMatch3.8.0

linux linux_kernelMatch3.8.1

linux linux_kernelMatch3.8.2

linux linux_kernelMatch3.8.3

linux linux_kernelMatch3.8.4

Source	Link
kernel	www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6
git	www.git.kernel.org/
openwall	www.openwall.com/lists/oss-security/2013/04/16/11
github	www.github.com/torvalds/linux/commit/92f28d973cce45ef5823209aab3138eb45d8b349

29 Apr 2026 01:13Current

6.2Medium risk

Vulners AI Score6.2

CVSS 21.9

EPSS0.00039

CWE-264