CVE-2013-3236: The vmci_transport_dgram_dequeue function in net/vmw_vsock/vmci_transport.c in the Linux kernel before 3.9-...

Security readout for executives and security teams

CVE-2013-3236 is a Linux kernel local information disclosure bug. A logged-in local user could cause the VMware socket transport code to expose bytes from kernel stack memory. It is not described as remote code execution, and the provided sources do not show active exploitation. Exposure is most relevant to systems running affected Linux kernels before 3.9-rc7 or vendor kernels that did not backport the fix. Practical exposure depends on local user access and use or availability of the vmw_vsock/vmci transport path. Treat as a moderate patching item. It can expose sensitive kernel memory to local users, which matters on shared or multi-tenant hosts, but the source bundle does not support emergency remote-exploitation urgency. Mitigation focus: Upgrade to a kernel containing commit 680d04e0ba7e or a vendor backport.; Check distribution vendor advisories for fixed package versions.; Prioritize shared systems where untrusted users have local accounts..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.