LiveActive security incident?Get immediate response
CVE Record

CVE-2013-7027: The ieee80211_radiotap_iterator_init function in net/wireless/radiotap.c in the Linux kernel before 3.11.7...

The ieee80211_radiotap_iterator_init function in net/wireless/radiotap.c in the Linux kernel before 3.11.7 does not check whether a frame contains any data outside of the header, which might allow attackers to cause a denial of service (buffer over-read) via a crafted header.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's Takemoderate

Analyst readout for executives and security teams

Plain-English summary

This is a Linux kernel bug in wireless packet header parsing. A malformed radiotap header could make affected kernels read past expected data and potentially cause denial of service. The sources do not provide a CVSS score or evidence of active exploitation.

Executive priority

Treat as a maintenance-priority kernel denial-of-service issue. It is not supported by active exploitation evidence in the provided sources, but exposed wireless-processing systems should be updated through normal emergency-aware patch cycles.

Technical view

In Linux kernel before 3.11.7, ieee80211_radiotap_iterator_init in net/wireless/radiotap.c failed to verify that a frame contained data beyond the header. A crafted header could trigger a buffer over-read and denial of service. Upstream commit and Linux 3.11.7 changelog references confirm the fix lineage.

Likely exposure

Exposure is most plausible on systems running affected Linux kernels that process radiotap wireless frames. The bundle also cites Ubuntu and openSUSE advisories, indicating downstream distribution impact. Exact affected distro kernel versions are not fully enumerated in the provided data.

Exploitation context

The source description says attackers might cause denial of service via a crafted header. There is no KEV listing and no cited source in the bundle confirming active exploitation or public weaponization.

Researcher notes

The record lacks CVSS, CWE, and precise affected CPEs. Analysis should rely on upstream Linux 3.11.7 fix references and vendor advisories for distribution-specific applicability. Avoid assuming remote reachability without confirming the host processes attacker-controlled radiotap frames.

Mitigation direction

  • Inventory Linux systems using kernels older than 3.11.7 or affected vendor backports.
  • Apply the relevant kernel update from the OS vendor.
  • Check Ubuntu and openSUSE advisories for distro-specific fixed package versions.
  • Prioritize systems handling wireless monitoring, capture, or radiotap frame processing.

Validation and detection

  • Confirm running kernel versions against vendor advisory fixed versions.
  • Verify kernel packages include the upstream fix for commit f5563318ff1bde15b10e736e97ffce13be08bc1a.
  • Review wireless-enabled hosts and packet-capture systems for affected kernel exposure.
  • Check change-management records for Ubuntu or openSUSE kernel updates tied to the cited USNs.
Prepared
Confidence
medium
Sources
12

Public sources used

Based on public source material and reviewed before publication.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2013-7027 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
20Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.