CVE-2013-1979: Linux Kernel

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application.

Affected products

• Linux Linux Kernel: up to and including 3.8.10; version 3.8.0 only; version 3.8.1 only; version 3.8.2 only; version 3.8.3 only; version 3.8.4 only; …

Published 2013-05-03. Last modified 2026-06-16.