VULNERABILITY INTELLIGENCE

CVE-2013-1763

CVSS score7.2 HIGH
EPSS probability4.21%
CISA KEVNot currently listed
Published2013-02-28
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references