CVE-2013-4515: The bcm_char_ioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initi...

Security readout for executives and security teams

This is an older Linux kernel information disclosure flaw. A local user on an affected system could ask a specific Broadcom staging driver interface for device-driver information and receive leftover kernel memory. It does not describe remote compromise, but leaked kernel memory can weaken defenses or support later attacks. Exposure is most plausible on legacy Linux systems or vendor kernels carrying the vulnerable bcm staging driver code before the relevant fix. Systems need local user access and the affected ioctl path to be reachable. The source bundle does not provide a complete affected distribution or package matrix. Address through normal vulnerability management, with higher priority for shared or legacy Linux hosts. This is not evidenced as remotely exploitable or actively exploited, but kernel memory disclosure is still material because it can support follow-on attacks. Mitigation focus: Apply vendor kernel updates referenced by Ubuntu, openSUSE, or your distribution.; Upgrade to a kernel containing the upstream fix before or at Linux 3.12.; Inventory legacy systems running pre-3.12 or backported vendor kernels..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.