CVE-2013-3226: The sco_sock_recvmsg function in net/bluetooth/sco.c in the Linux kernel before 3.9-rc7 does not initialize...

Security readout for executives and security teams

CVE-2013-3226 is a Linux kernel information leak in Bluetooth SCO handling. A local user could cause the kernel to return data from stack memory, potentially exposing sensitive information. It is not described as remotely exploitable, and the supplied sources do not show active exploitation. Exposure is most relevant to Linux systems running kernels before 3.9-rc7 or vendor kernels lacking the backported fix. Practical risk requires local user access and the vulnerable Bluetooth SCO code path. The bundle does not identify specific affected distributions beyond referenced Ubuntu and openSUSE advisories. Treat this as a targeted kernel hygiene issue, not an internet emergency. Prioritize patching legacy or shared Linux systems where local users are not fully trusted. Business urgency increases if old kernels remain on production, hosting, lab, or appliance environments. Mitigation focus: Update to a Linux kernel containing upstream commit c8c499175f7d295ef867335bceb9a76a2c3cdc38.; Apply relevant vendor kernel updates from Ubuntu, openSUSE, or your Linux distributor.; Prioritize shared multi-user Linux systems and hosts allowing untrusted local accounts..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.