CVE detail
CVE-2013-7266 — CVE-2013-7266
Published 2014-01-06 · Modified 2026-06-17 · Vendor linux · Product linux_kernel · Source nvd
UNKNOWN
severity
CVSS-derived band
0.0043
EPSS probability
exploitation probability, 30d
36.0%
EPSS percentile
percentile vs all CVEs
NOT LISTED
CISA KEV
known exploited catalog
Description
The mISDN_sock_recvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the size of an associated data structure, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References