CVE-2013-1059: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 4.5% chance of exploitation in the next 30 days.

net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation.

Affected products

• Canonical Ubuntu Linux: version 12.04 only
• Linux Linux Kernel: before 3.0.86 (fixed in 3.0.86); from 3.1, before 3.2.49 (fixed in 3.2.49); from 3.3, before 3.4.53 (fixed in 3.4.53); from 3.5, before 3.9.10 (fixed in 3.9.10); version 3.10 only

Published 2013-07-08. Last modified 2026-06-16.