CVE-2013-2140: Linux Kernel

Low severity, CVSS 3.8. EPSS: 1% chance of exploitation in the next 30 days.

The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature.

Affected products

• Linux Linux Kernel: up to and including 3.10.4; version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; …

Published 2013-09-25. Last modified 2026-06-16.