CVE-2013-2234

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2013-2234
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2013-2234.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2013-2234
Downstream
Related
Withdrawn
2026-01-27T04:12:10Z
Published
2013-07-04T21:55:01Z
Modified
2026-04-16T01:43:20Z
Summary
[none]
Details

The (1) key_notify_sa_flush and (2) key_notify_policy_flush functions in net/key/af_key.c in the Linux kernel before 3.10 do not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify interface of an IPSec key_socket.

References

Affected packages