CVE-2013-4220: The bad_mode function in arch/arm64/kernel/traps.c in the Linux kernel before 3.9.5 on the ARM64 platform a...

Security readout for executives and security teams

CVE-2013-4220 is a Linux kernel issue on ARM64 systems where a local user could crash the machine. It is not described as remote code execution, and the source bundle does not show active exploitation. Business urgency depends on whether any ARM64 Linux systems still run kernels before 3.9.5 or vendor builds carrying this bug. Exposure is limited to ARM64 Linux systems running kernels before 3.9.5 or vendor-maintained kernels that did not carry the upstream fix. Systems without local untrusted users are less exposed. The provided affected-product data is sparse and does not identify specific distributions or appliances. Treat this as a targeted reliability risk for legacy ARM64 Linux assets. It is not enough to drive emergency internet-wide response, but any multi-user, shared, or customer-adjacent ARM64 system should be checked and patched through normal kernel maintenance. Mitigation focus: Upgrade affected ARM64 Linux kernels to 3.9.5 or a vendor build containing the upstream fix.; Check distribution or appliance vendor advisories for backported kernel fixes.; Restrict untrusted local shell, application, and container access until remediation is complete..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.