CVE-2013-7281: The dgram_recvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a certain le...

Security readout for executives and security teams

CVE-2013-7281 is a Linux kernel information disclosure flaw. A local user could cause certain IEEE 802.15.4 datagram receive paths to return data from uninitialized kernel stack memory. This is not described as remote code execution, but leaked kernel memory can expose sensitive data or help chain later attacks. Exposure is most likely on systems running Linux kernels before 3.12.4 or vendor kernels that included the vulnerable IEEE 802.15.4 datagram implementation. The source bundle does not provide a complete affected distribution matrix beyond Ubuntu advisories and the upstream kernel fix reference. Handle through normal kernel patch governance, with higher priority for shared Linux infrastructure and systems running untrusted local workloads. There is no provided evidence of active exploitation, but kernel memory disclosure can increase the risk of later compromise chains. Mitigation focus: Update affected Linux kernels using vendor security advisories or a release containing the upstream fix.; For Ubuntu systems, review the listed USN advisories and apply the relevant kernel packages.; Prioritize shared, multi-user, or appliance systems where untrusted local code can run..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.