CVE-2013-4247: Linux Kernel

High severity, CVSS 7.8. EPSS: 3.6% chance of exploitation in the next 30 days.

Off-by-one error in the build_unc_path_to_root function in fs/cifs/connect.c in the Linux kernel before 3.9.6 allows remote attackers to cause a denial of service (memory corruption and system crash) via a DFS share mount operation that triggers use of an unexpected DFS referral name length.

Affected products

• Linux Linux Kernel: from 3.8, before 3.9.6 (fixed in 3.9.6)

Published 2013-08-25. Last modified 2026-06-16.