CVE-2013-6380

CVE-2013-6380 describes a denial-of-service vulnerability in the Linux kernel's aacraid driver, specifically affecting versions through 3.12.1. A local attacker can exploit an improper size validation in the aac_send_raw_srb function via a crafted FSACTL_SEND_RAW_SRB ioctl call, leading to an invalid pointer dereference and system instability. The vulnerability has a CVSS score of 4.7, indicating a medium severity. It requires local access (AV:L) and medium attack complexity (AC:M), with the primary impact being a denial of service (A:C). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.