Improper input validation in Linux Kernel

CVE-2013-2140

The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.010 (59.7th percentile) — read the EPSS interpretation.