VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 22, 2013· Updated Apr 29, 2026

CVE-2013-3226

CVE-2013-3226

Description

The sco_sock_recvmsg function in net/bluetooth/sco.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

Affected products

6
  • Linux/Kernel6 versions
    cpe:2.3:o:linux:linux_kernel:3.9:rc1:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:linux:linux_kernel:3.9:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc3:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc4:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.9:rc5:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:*:rc6:*:*:*:*:*:*range: <=3.9

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.