CVE-2013-3222: The vcc_recvmsg function in net/atm/common.c in the Linux kernel before 3.9-rc7 does not initialize a certa...

Security readout for executives and security teams

CVE-2013-3222 is a Linux kernel information disclosure bug. A local user could cause an ATM socket receive path to return data from kernel stack memory. That can expose sensitive kernel memory but does not by itself indicate remote compromise or privilege escalation in the provided sources. Exposure is most relevant to Linux systems running kernels before 3.9-rc7 or vendor kernels lacking the backported fix. Risk is higher where untrusted local users or workloads can execute system calls. The bundle does not confirm whether specific ATM kernel configuration is required. Treat as a routine but real kernel patching item. It requires local access and has no cited active exploitation, but kernel memory disclosure can assist further attacks on shared or high-trust systems. Mitigation focus: Apply vendor kernel updates that include the CVE-2013-3222 fix.; Confirm the kernel includes upstream commit 9b3e617f3df53822345a8573b6d358f6b9e5ed87 or an equivalent backport.; Prioritize multi-user systems and hosts running untrusted local workloads..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.