VULNERABILITY INTELLIGENCE
CVE-2013-6282
CVSS score8.8 HIGH
EPSS probability39.71%
CISA KEVKnown exploited vulnerability
Published2013-11-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Linux Kernel Improper Input Validation Vulnerability
Vendor / product: Linux / Kernel
Description
The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- cve@mitre.org — Patch
- cve@mitre.org — Patch
- cve@mitre.org — Mailing List, Vendor Advisory
- cve@mitre.org — Mailing List
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Exploit, Patch
- cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List