DEBIAN-CVE-2013-2147

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2013-2147
Downstream
DSA-2906-1
Published: 07 Jun 2013, 14:03
Last modified:28 Apr 2026, 20:12

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

07 Jun 2013, 14:03
Published
Vulnerability first disclosed
28 Apr 2026, 20:12
Last Modified
Vulnerability information updated

Description

The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c.

Affected Systems

  • debian•linux

    < 3.11.5-1 | < 3.11.5-1 | < 3.11.5-1 | < 3.11.5-1

References (1)