The pn_recvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
DSA-2906-1 | linux-2.6 security update |
![]() |
EUVD-2013-7043 | The pn_recvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call. |
![]() |
USN-2107-1 | Linux kernel vulnerabilities |
![]() |
USN-2108-1 | Linux kernel (EC2) vulnerabilities |
![]() |
USN-2109-1 | Linux kernel vulnerabilities |
![]() |
USN-2110-1 | Linux kernel (OMAP4) vulnerabilities |
![]() |
USN-2113-1 | Linux kernel (Saucy HWE) vulnerabilities |
![]() |
USN-2117-1 | Linux kernel vulnerabilities |
![]() |
USN-2135-1 | Linux kernel (Quantal HWE) vulnerabilities |
![]() |
USN-2136-1 | Linux kernel (Raring HWE) vulnerabilities |
![]() |
USN-2138-1 | Linux kernel vulnerabilities |
![]() |
USN-2139-1 | Linux kernel (OMAP4) vulnerabilities |
![]() |
USN-2141-1 | Linux kernel (OMAP4) vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T18:01:20.403Z
Reserved: 2014-01-05T00:00:00
Link: CVE-2013-7265

No data.

Status : Deferred
Published: 2014-01-06T16:55:09.210
Modified: 2025-04-11T00:51:21.963
Link: CVE-2013-7265


No data.