VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 22, 2013· Updated Jun 16, 2026

CVE-2013-3226

CVE-2013-3226

Description

The sco_sock_recvmsg function in net/bluetooth/sco.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Linux/Kernel7 versions
    cpe:2.3:o:linux:linux_kernel:3.9:rc1:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:linux:linux_kernel:3.9:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc3:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc4:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc5:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:*:rc6:*:*:*:*:*:*range: <=3.9
    • (no CPE)range: < 3.9-rc7

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.