linux linux-kernel CVE-2013-2548 in Linux and Red Hat Products
Published on March 15, 2013

product logo product logo
The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect length value during a copy operation, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2013-2548

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2013-2548 are published in these products:

 
 

Exploit Probability

EPSS
0.05%
Percentile
16.77%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.