Unrated severityNVD Advisory· Published Aug 25, 2013· Updated Jun 16, 2026

CVE-2013-4247

Description

Off-by-one error in the build_unc_path_to_root function in fs/cifs/connect.c in the Linux kernel before 3.9.6 allows remote attackers to cause a denial of service (memory corruption and system crash) via a DFS share mount operation that triggers use of an unexpected DFS referral name length.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=3.8,<3.9.6
- (no CPE)range: <3.9.6

Patches

Vulnerability mechanics

References

github.com/torvalds/linux/commit/1fc29bacedeabb278080e31bb9c1ecb49f143c3bnvdExploitPatchThird Party Advisory
www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.9.6nvdVendor Advisory
www.openwall.com/lists/oss-security/2013/08/14/10nvdMailing ListThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
git.kernel.orgnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000