CVE-2013-4343

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.11.1

Description The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the drivers/net/tun.c file. This vulnerability can be exploited by local users to gain privileges, provided they have the CAP NET ADMIN capability. The exploitation involves providing an invalid tuntap interface name in a TUNSETIFF ioctl call.

Recommendations For Linux kernel versions through 3.11.1, update to a version later than 3.11.1 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.