CVE-2013-3231: The llc_ui_recvmsg function in net/llc/af_llc.c in the Linux kernel before 3.9-rc7 does not initialize a ce...

Security readout for executives and security teams

CVE-2013-3231 is a Linux kernel information leak. A local user could cause an affected kernel to return data from kernel stack memory. This is not described as remote code execution, but leaked kernel data can weaken defenses and support follow-on attacks on shared or multi-user systems. Exposure is most likely on legacy Linux systems running kernels before 3.9-rc7 or vendor kernels without the backported fix. Risk is higher where untrusted local users, shared hosting, containers, or shell access exist. The bundle does not provide exact affected distribution package versions. Treat this as a legacy Linux hygiene issue with moderate urgency. It is most important where older kernels still support shared local access. Patch through normal kernel maintenance, but escalate if affected systems host untrusted users or tenants. Mitigation focus: Apply the relevant vendor kernel security update for affected Linux distributions.; Upgrade to Linux 3.9-rc7 or a vendor kernel containing the backported fix.; Check Ubuntu, Fedora, openSUSE, SUSE, Red Hat, or Mandriva guidance where applicable..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.