CVE-2013-2929: The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to...

Security readout for executives and security teams

CVE-2013-2929 is a Linux kernel flaw in older kernels before 3.12.2. A local user could bypass intended ptrace protections or read sensitive IA64 register data. This is mainly a risk on legacy Linux hosts where untrusted users, containers, or shared workloads can execute local code. Exposure is most likely on unsupported or long-lived Linux systems running pre-3.12.2 kernels or vendor kernels without the backported fix. IA64 systems have a specific sensitive-register disclosure angle, but ptrace restriction bypass risk can matter anywhere local users can run code. Treat as a legacy Linux hygiene issue with moderate urgency. Prioritize internet-facing infrastructure with local users, shared compute, or unsupported kernels. It is not evidenced as remotely exploitable or actively exploited in the supplied sources. Mitigation focus: Apply vendor kernel updates that include the CVE-2013-2929 fix.; Use vendor advisories to confirm fixed package versions for each distribution.; Upgrade unsupported kernels to a maintained vendor-supported kernel line..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.