CVE-2013-7266: The mISDN_sock_recvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not e...

Security readout for executives and security teams

This is an old Linux kernel information-disclosure flaw in the mISDN socket receive path. A local user could cause kernel memory contents to be returned through receive system calls. The sources do not show remote attack capability or confirmed active exploitation. Exposure is most likely on legacy Linux systems or distributions running kernels that predate, or lack backports for, the 3.12.4 fix. Systems without local untrusted users or mISDN/ISDN use have lower practical risk, but kernel package status must be verified. Medium priority for legacy Linux environments. The issue requires local access, but kernel memory disclosure can weaken system isolation and support chained attacks. Patch through normal kernel maintenance unless the system allows untrusted local users. Mitigation focus: Inventory Linux kernel versions across affected legacy systems.; Apply vendor kernel updates that include CVE-2013-7266 fixes.; Confirm distribution backports rather than relying only on upstream version numbers..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.