CVE-2013-2635: The rtnl_fill_ifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not initialize...

Security readout for executives and security teams

CVE-2013-2635 is a Linux kernel information leak. A local user could run a crafted application and receive data unintentionally copied from kernel stack memory. This is not described as remote code execution, but leaked kernel memory can weaken host confidentiality and may help other attacks. Exposure is most likely on older Linux systems or appliances running kernels before 3.8.4, or vendor kernels that had not yet received the 2013 distro security updates. The provided data does not identify specific vulnerable package versions beyond vendor advisories. Address during legacy Linux remediation, with priority for shared or multi-user systems. This is not supported by sources as actively exploited or remotely reachable, but kernel memory disclosure can increase risk when combined with other vulnerabilities. Mitigation focus: Apply the relevant vendor kernel security update or a kernel containing the upstream fix.; Reboot systems so the corrected kernel is actually running.; Prioritize multi-user, shared hosting, jump hosts, and systems with untrusted local code execution..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.