CVE-2013-1959

CVE-2013-1959 is a local privilege escalation vulnerability affecting Linux kernel versions prior to 3.8.9. It stems from insufficient capability requirements for uid_map and gid_map files within the kernel/user_namespace.c component, allowing an unprivileged local user to modify these files within a privileged process. With a CVSS score of 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P), this vulnerability requires high attack complexity but can lead to partial confidentiality, integrity, and availability compromise. While not listed in CISA's KEV catalog and showing no active exploitation or community discussion, a public exploit (EDB-25450) exists, demonstrating its potential for abuse.