VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 7, 2013· Updated Jun 16, 2026

CVE-2013-2147

CVE-2013-2147

Description

The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14
  • Linux/Kernel12 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <=3.9.4
    • cpe:2.3:o:linux:linux_kernel:3.9.0:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9.1:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9.2:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9.3:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc3:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc4:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc5:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc6:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc7:*:*:*:*:*:*
  • SUSE S.A./Linux Enterprise Server
    cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:*:*:*:*
  • Ubuntu/Linux Kernelllm-fuzzy
    Range: <=3.9.4

Patches

Vulnerability mechanics

References

16

News mentions

0

No linked articles in our index yet.