CVE-2013-3228: The irda_recvmsg_dgram function in net/irda/af_irda.c in the Linux kernel before 3.9-rc7 does not initializ...

Security readout for executives and security teams

CVE-2013-3228 is a Linux kernel information leak. A local user could trigger an IrDA socket receive path and read data left on the kernel stack. It is not described as remote code execution or privilege escalation in the provided sources, but leaked kernel memory can still aid further attacks. Exposure is mainly older Linux systems or vendor kernels that had not backported the upstream fix. Risk is higher where untrusted local users can run code. The source bundle does not provide a complete distro version matrix. Treat as a patch hygiene item for legacy Linux estates, with elevated attention on shared or multi-user hosts. It is not supported by the sources as internet-exploitable or actively exploited, but kernel memory disclosure should not remain unpatched. Mitigation focus: Update affected Linux kernels using vendor-supported security packages.; Verify the fix or equivalent vendor backport is present.; Prioritize multi-user systems and hosts running untrusted local workloads..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.