CVE detail
CVE-2013-6392 — CVE-2013-6392
Published 2013-11-30 · Modified 2026-06-17 · Vendor codeaurora · Product android-msm · Source nvd
UNKNOWN
severity
CVSS-derived band
0.0037
EPSS probability
exploitation probability, 30d
30.0%
EPSS percentile
percentile vs all CVEs
NOT LISTED
CISA KEV
known exploited catalog
Description
The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted GENLOCK_IOC_EXPORT ioctl call.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References