CVE-2013-6392
published 2013-11-30CVE-2013-6392: The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions…
PriorityP416medium4.9CVSS 2.0
AVLACLAuNCCINAN
EPSS
0.37%
29.1th percentile
The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted GENLOCK_IOC_EXPORT ioctl call.
Affected
30 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
| codeaurora | android-msm | — | — |
CVSS provenance
nvdv2.04.9MEDIUMAV:L/AC:L/Au:N/C:C/I:N/A:N
osv4.9MEDIUM
vendor_debian4.9LOW
vendor_redhat4.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-vmh8-jgcf-h9p2: The genlock_dev_ioctl function in genlock
ghsa_unreviewed·2022-05-17
CVE-2013-6392 [MEDIUM] GHSA-vmh8-jgcf-h9p2: The genlock_dev_ioctl function in genlock
The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted GENLOCK_IOC_EXPORT ioctl call.
OSV
CVE-2013-6392: The genlock_dev_ioctl function in genlock
osv·2013-11-30·CVSS 4.9
CVE-2013-6392 [MEDIUM] CVE-2013-6392: The genlock_dev_ioctl function in genlock
The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted GENLOCK_IOC_EXPORT ioctl call.
Debian
CVE-2013-6392: linux - The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux ...
vendor_debian·2013·CVSS 4.9
CVE-2013-6392 [MEDIUM] CVE-2013-6392: linux - The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux ...
The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted GENLOCK_IOC_EXPORT ioctl call.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
Red Hat
CVE-2013-6392: The genlock_dev_ioctl function in genlock
vendor_redhat·CVSS 4.9
CVE-2013-6392 [MEDIUM] CVE-2013-6392: The genlock_dev_ioctl function in genlock
The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted GENLOCK_IOC_EXPORT ioctl call.
Statement: Not vulnerable. This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.
No detection rules found.
No public exploits indexed.
http://openwall.com/lists/oss-security/2013/11/25/4https://www.codeaurora.org/cgit/quic/la/kernel/msm/commit/drivers/base/genlock.c?id=e3c43027bdb59f03eec7ead0a01c77e4bf801625&h=jb_3.2.3http://openwall.com/lists/oss-security/2013/11/25/4https://www.codeaurora.org/cgit/quic/la/kernel/msm/commit/drivers/base/genlock.c?id=e3c43027bdb59f03eec7ead0a01c77e4bf801625&h=jb_3.2.3
2013-11-30
Published