CVE-2013-3237: The vsock_stream_sendmsg function in net/vmw_vsock/af_vsock.c in the Linux kernel before 3.9-rc7 does not i...

Security readout for executives and security teams

This is an old Linux kernel information disclosure bug. A local user could potentially read sensitive data left in kernel stack memory through the VMware vsock networking code. It is not described as remote code execution, and the provided sources do not show active exploitation. Exposure is most likely on systems running affected pre-3.9-rc7 Linux kernels or vendor kernels lacking the relevant backport, where VMware vsock functionality is present and local users can execute code. Treat this as a patch hygiene issue for legacy Linux systems. It has a local access requirement and no cited active exploitation, but kernel memory disclosure can weaken defenses if combined with other bugs. Mitigation focus: Apply vendor kernel updates containing the upstream vsock fix.; Confirm distro backports rather than relying only on version strings.; Review vendor advisories for any supported legacy kernel branches..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.