CVE-2013-3229: The iucv_sock_recvmsg function in net/iucv/af_iucv.c in the Linux kernel before 3.9-rc7 does not initialize...

Security readout for executives and security teams

This is a local Linux kernel information leak. A user already able to run code on an affected machine could cause the kernel to return uninitialized stack memory, potentially exposing sensitive data. It is not described as remotely exploitable in the provided sources. Exposure is most likely on older Linux systems with vulnerable kernels and IUCV socket code present. The source bundle names Linux before 3.9-rc7 and includes Ubuntu, SUSE/openSUSE, and Mandriva advisories, but does not provide complete package-level scope. Treat as a patching and exposure-reduction item for legacy Linux estates. It is lower urgency than remote code execution, but still relevant where untrusted users share systems or sensitive workloads run on old kernels. Mitigation focus: Apply vendor kernel updates from the relevant Linux distribution advisory.; Use a kernel containing commit a5598bd9c087dc0efc250a5221e5d0e6f584ee88 or later fix.; Prioritize systems allowing untrusted local users or multi-tenant workloads..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.